VYPR
← All advisories
High severity7.2NVD Advisory· Published Nov 11, 2026

CVE-2026-126220

CVE-2026-126220

Description

A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11 may allow an authenticated administrator to read or write arbitrary files or execute unauthorized code or commands via specially crafted requests to the GUI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Fortinet/Fortimanagerinferred2 versions
    >=7.4.0,<7.4.12,>=7.6.0,<7.6.8,>=8.0.0+ 1 more
    • (no CPE)range: >=7.4.0,<7.4.12,>=7.6.0,<7.6.8,>=8.0.0
    • (no CPE)range: 8.0.0, 7.6.0-7.6.7, 7.4.0-7.4.11

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.