Paper/Archive/CVE-2026-126253

CVE-2026-126253

Fortinet FortiOS — A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7…

CVSS 9.3

critical.is priorityof 100

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 No EPSS score.000 × 200.0 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow an unauthenticated attacker to broadcast LSA via specially crafted request

Affected

ProductAffectedFixed inSource

FortiOS8.0.0 – 8.0.1–CNA

FortiOS7.6.0 – 7.6.7–CNA

FortiOS7.4.0 – 7.4.12–CNA

FortiOS7.2.0 – 7.2.13–CNA

FortiOS7.0.1 – 7.0.19–CNA

Scores by source

fortinet (CNA)9.3CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H/E:P/RL:O/RC:C

References

reffortiguard.fortinet.com/psirt/FG-IR-26-267