High severity8.6NVD Advisory· Published Nov 11, 2026
CVE-2026-126238
CVE-2026-126238
Description
A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to bypass authorization checks and gain unauthorized access to restricted functionality.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 8.0.0-8.0.3, 6.6.0-6.6.10
Patches
Vulnerability mechanics
References
1News mentions
1- Incorrect authorization in rest-apiFortinet PSIRT · Nov 10, 2026