CVE-2026-126247
EUVD-2026-12389011.11.2026, 22:17
A use of externally-controlled format string vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated privileged attacker to execute unauthorized code or commands via http requests.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| fortinet | fortiauthenticator | 8.0.0 ≤ 𝑥 ≤ 8.0.3 | CNA |
| fortinet | fortiauthenticator | 6.6.0 ≤ 𝑥 ≤ 6.6.10 | CNA |
Common Weakness Enumeration