Critical severity9.0NVD Advisory· Published Nov 11, 2026
CVE-2026-126257
CVE-2026-126257
Description
A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to bypass credential validation in certain circumstances outside of the attacker's control and gain unauthorized access.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: >=6.6.0,<6.6.11
- Range: 8.0.0 through 8.0.3, 6.6.0 through 6.6.10
Patches
Vulnerability mechanics
References
1News mentions
1- Authentication bypassFortinet PSIRT · Nov 10, 2026