High severity7.2NVD Advisory· Published Nov 11, 2026
CVE-2026-126222
CVE-2026-126222
Description
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.3 through 7.6.7, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.3 through 7.6.7, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.3 through 7.6.7, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.3 through 7.6.7 may allow an authenticated attacker with admin privileges to execute unauthorized code or commands via crafted requests.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Range: 8.0.0 through 8.0.1, 7.6.3 through 7.6.7
- Range: 8.0.0 through 8.0.1, 7.6.3 through 7.6.7
- Range: 8.0.0 through 8.0.1, 7.6.3 through 7.6.7
- Range: 8.0.0 through 8.0.1, 7.6.3 through 7.6.7
Patches
Vulnerability mechanics
References
1News mentions
1- Improper limitation of a pathname to a restricted directoryFortinet PSIRT · Nov 10, 2026