by Kastro
Paper/Archive/CVE-2026-126229

CVE-2026-126229

Fortinet FortiManager — A authorization bypass through user-controlled key vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 throu…

CVSS 9.1
critical.is priorityof 100
27
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A authorization bypass through user-controlled key vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2 all versions, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions, FortiManager Cloud 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2 all versions may allow an authenticated administrator to access to other VDOMs via specially crafted HTTP requests.

Affected

ProductAffectedFixed inSource
FortiManager8.0.0 – 8.0.1–CNA
FortiManager7.6.0 – 7.6.7–CNA
FortiManager7.4.0 – 7.4.11–CNA
FortiManager7.2.0 – 7.2.13–CNA
FortiManager7.0.0 – 7.0.16–CNA
FortiAnalyzer8.0.0 – 8.0.1–CNA
FortiAnalyzer7.6.0 – 7.6.7–CNA
FortiAnalyzer7.4.0 – 7.4.11–CNA
FortiAnalyzer7.2.0 – 7.2.13–CNA
FortiAnalyzer7.0.0 – 7.0.16–CNA
FortiManager Cloud8.0.1–CNA
FortiManager Cloud7.6.0 – 7.6.7–CNA

Scores by source

fortinet (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C

References

reffortiguard.fortinet.com/psirt/FG-IR-26-244