High severity7.2NVD Advisory· Published Nov 11, 2026
CVE-2026-126211
CVE-2026-126211
Description
A improper privilege management vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.1 through 7.6.7, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.1 through 7.6.8, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.1 through 7.6.7, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.1 through 7.6.8 may allow an authenticated privileged attacker to elevate their privileges via crafted JSON-RPC request.
Affected products
4- Range: 7.6.1-7.6.8
- Range: 8.0.0 through 8.0.1, 7.6.1 through 7.6.7
- Range: 8.0.0 through 8.0.1, 7.6.1 through 7.6.7
- Range: 8.0.0 through 8.0.1, 7.6.1 through 7.6.8
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.