CVE-2026-126212
EUVD-2026-12385411.11.2026, 22:17
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11 may allow an authenticated administrator to execute unauthorized code or commands or cause a denial of service via specially crafted JSON-RPC requests.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| fortinet | fortimanager | 8.0.0 ≤ 𝑥 ≤ 8.0.1 | CNA |
| fortinet | fortimanager | 7.6.0 ≤ 𝑥 ≤ 7.6.7 | CNA |
| fortinet | fortimanager | 7.4.0 ≤ 𝑥 ≤ 7.4.11 | CNA |
| fortinet | fortianalyzer | 8.0.0 ≤ 𝑥 ≤ 8.0.1 | CNA |
| fortinet | fortianalyzer | 7.6.0 ≤ 𝑥 ≤ 7.6.7 | CNA |
| fortinet | fortianalyzer | 7.4.0 ≤ 𝑥 ≤ 7.4.11 | CNA |
| fortinet | fortimanager | 7.4.1 ≤ 𝑥 ≤ 7.4.11 | CNA |
| fortinet | fortianalyzer | 7.4.1 ≤ 𝑥 ≤ 7.4.11 | CNA |
Vulnerability Media Exposure