CVE-2026-126214
EUVD-2026-12388411.11.2026, 22:17
A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12 may allow an authenticated administrator to escalate their privileges, bypass authorization controls or impersonate internal services via specially crafted requests to the GUI.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| fortinet | fortimanager | 8.0.0 | CNA |
| fortinet | fortimanager | 7.6.0 ≤ 𝑥 ≤ 7.6.7 | CNA |
| fortinet | fortimanager | 7.4.0 ≤ 𝑥 ≤ 7.4.11 | CNA |
| fortinet | fortimanager | 7.2.0 ≤ 𝑥 ≤ 7.2.12 | CNA |
| fortinet | fortianalyzer | 8.0.0 ≤ 𝑥 ≤ 8.0.1 | CNA |
| fortinet | fortianalyzer | 7.6.0 ≤ 𝑥 ≤ 7.6.7 | CNA |
| fortinet | fortianalyzer | 7.4.0 ≤ 𝑥 ≤ 7.4.11 | CNA |
| fortinet | fortianalyzer | 7.2.0 ≤ 𝑥 ≤ 7.2.12 | CNA |
| fortinet | fortianalyzer | 7.4.1 ≤ 𝑥 ≤ 7.4.11 | CNA |
| fortinet | fortianalyzer | 7.2.1 ≤ 𝑥 ≤ 7.2.12 | CNA |
Common Weakness Enumeration
Vulnerability Media Exposure