Critical severity9.8NVD Advisory· Published Nov 10, 2026
CVE-2026-126261
CVE-2026-126261
Description
A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.8 may allow an unauthenticated attacker that can reach the FGFM port to execute code or commands via crafted FGFM packets.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 8.0.0, 7.6.0-7.6.7, 7.4.0-7.4.5, 7.2.0-7.2.8
Patches
Vulnerability mechanics
References
1News mentions
1- FGFM elevation before registration password is verifiedFortinet PSIRT · Nov 10, 2026