VYPR
← All advisories
High severity8.7NVD Advisory· Published Nov 11, 2026

CVE-2026-126183

CVE-2026-126183

Description

A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated attacker to execute commands outside of the expected scope via specially crafted HTTP request.

Affected products

2
  • Fortinet/Fortimanager Cloudinferred
    Range: 7.2.1-7.2.12
  • Fortinet/Fortimanagerllm-fuzzy
    Range: 8.0.0 through 8.0.1, 7.6.0 through 7.6.7, 7.4.0 through 7.4.11, 7.2.0 through 7.2.12, Cloud 8.0.1, Cloud 7.6.0 through 7.6.7, Cloud 7.4.1 through 7.4.11, Cloud 7.2.1 through 7.2.12

Patches

Vulnerability mechanics

References

1

News mentions

1