CVE-2026-126170 PUBLISHED

Assigner: fortinet
Reserved: 10.11.2026 Published: 11.11.2026 Updated: 11.11.2026

A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer Cloud 8.0.1 through 8.0.2, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer-BigData 7.6.0 through 7.6.2, FortiManager 8.0.0 through 8.0.2, FortiManager 7.6.0 through 7.6.7, FortiManager Cloud 8.0.1 through 8.0.2, FortiManager Cloud 7.6.0 through 7.6.7 may allow an unauthenticated attacker to execute unauthorized code or commands via a specially crafted HTTP request

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:R
CVSS Score: 9.8

Product Status

Vendor Fortinet
Product FortiManager
Versions Default: unaffected
  • affected from 8.0.0 to 8.0.2 (incl.)
  • affected from 7.6.0 to 7.6.7 (incl.)
Vendor Fortinet
Product FortiAnalyzer
Versions Default: unaffected
  • affected from 8.0.0 to 8.0.2 (incl.)
  • affected from 7.6.0 to 7.6.7 (incl.)
Vendor Fortinet
Product FortiManager Cloud
Versions Default: unaffected
  • affected from 8.0.1 to 8.0.2 (incl.)
  • affected from 7.6.0 to 7.6.7 (incl.)
Vendor Fortinet
Product FortiAnalyzer Cloud
Versions Default: unaffected
  • affected from 8.0.1 to 8.0.2 (incl.)
  • affected from 7.6.0 to 7.6.7 (incl.)
Vendor Fortinet
Product FortiAnalyzer-BigData
Versions Default: unaffected
  • affected from 7.6.0 to 7.6.2 (incl.)

Solutions

Upgrade to upcoming FortiManager version 8.0.3 or above Upgrade to FortiManager version 7.6.8 or above Upgrade to FortiManager version 7.4.12 or above Upgrade to FortiManager version 7.2.13 or above Upgrade to upcoming FortiManager Cloud version 8.0.3 or above Upgrade to FortiManager Cloud version 7.6.8 or above Upgrade to upcoming FortiAnalyzer-BigData version 7.6.3 or above Upgrade to FortiAnalyzer-BigData version 7.4.7 or above Upgrade to upcoming FortiAnalyzer-BigData version 7.2.13 or above Upgrade to upcoming FortiAnalyzer version 8.0.3 or above Upgrade to FortiAnalyzer version 7.6.8 or above Upgrade to upcoming FortiAnalyzer Cloud version 8.0.3 or above Upgrade to FortiAnalyzer Cloud version 7.6.8 or above

References

Problem Types

  • Denial of service CWE