CVE-2026-126261

EUVD-2026-123051
A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.8 may allow an unauthenticated attacker that can reach the FGFM port to execute code or commands via crafted FGFM packets.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
fortinetCNA
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
fortinetfortimanager
8.0.0
CNA
fortinetfortimanager
7.6.0 ≤
𝑥
≤ 7.6.7
CNA
fortinetfortimanager
7.4.0 ≤
𝑥
≤ 7.4.5
CNA
fortinetfortimanager
7.2.0 ≤
𝑥
≤ 7.2.8
CNA