High severity8.2NVD Advisory· Published Nov 11, 2026

CVE-2026-126250

Description

A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to cause a denial of service via HTTP requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fortinet/Fortifabric Cloudinferred
Range: >=8.0.0,<8.0.4
Fortinet/Fortiauthenticatorllm-fuzzy
Range: 8.0.0 through 8.0.3, 6.6.0 through 6.6.10

Patches

Vulnerability mechanics

References

fortiguard.fortinet.com/psirt/FG-IR-26-264nvd

News mentions

Incorrect authorization in django-guest
Fortinet PSIRT · Nov 10, 2026

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000