High severity7.5NVD Advisory· Published Nov 11, 2026
CVE-2026-126248
CVE-2026-126248
Description
A insufficiently protected credentials vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to obtain sensitive information via HTTPS requests.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 8.0.0 through 8.0.3, 6.6.0 through 6.6.10
Patches
Vulnerability mechanics
References
1News mentions
1- Insufficiently protected credentialsFortinet PSIRT · Nov 10, 2026