CVE-2026-126185
EUVD-2026-12386111.11.2026, 22:17
A improper control of generation of code ('code injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11 may allow an authenticated administrator to execute unauthorized code or commands via specially crafted requests.Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| fortinet | fortimanager | 8.0.0 ≤ 𝑥 ≤ 8.0.1 | CNA |
| fortinet | fortimanager | 7.6.0 ≤ 𝑥 ≤ 7.6.7 | CNA |
| fortinet | fortimanager | 7.4.0 ≤ 𝑥 ≤ 7.4.11 | CNA |
| fortinet | fortianalyzer | 8.0.0 ≤ 𝑥 ≤ 8.0.1 | CNA |
| fortinet | fortianalyzer | 7.6.0 ≤ 𝑥 ≤ 7.6.7 | CNA |
| fortinet | fortianalyzer | 7.4.0 ≤ 𝑥 ≤ 7.4.11 | CNA |
| fortinet | fortimanager | 7.4.1 ≤ 𝑥 ≤ 7.4.11 | CNA |
| fortinet | fortianalyzer | 7.4.1 ≤ 𝑥 ≤ 7.4.11 | CNA |
Vulnerability Media Exposure