Medium severity6.6NVD Advisory· Published Nov 10, 2026· Updated Nov 10, 2026
CVE-2026-121530
CVE-2026-121530
Description
A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated attacker to gain improper access control via an invalid token after entering a valid username and password
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
1- Broken Access Control in Two-Factor-AuthenticationFortinet PSIRT · Nov 10, 2026