CVE-2026-126176
HIGH
MEDIUM
Priority: 0.02
BB Relevance:
66/100
Published: 2026-11-11
Modified: 2026-11-12
First seen: 2026-11-11
Status: active
Attack Surface
Network
No Auth
No Interaction
Integ. Impact
Scope Change
CVSS Vector Breakdown
AV:
Network
AC:
High
PR:
None
UI:
None
S:
Changed
C:
Low
I:
High
A:
Low
Description
A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an unauthenticated remote attacker to inject arbitary content into a signed SAML response via crafted SAML requests.
Weakness Classification (1)
Affected Software (16)
| Vendor | Product | Version |
|---|---|---|
| Fortinet | FortiAnalyzer | 8.0.0 |
| Fortinet | FortiAnalyzer | 7.6.0 |
| Fortinet | FortiAnalyzer | 7.4.0 |
| Fortinet | FortiAnalyzer | 7.2.0 |
| Fortinet | FortiAnalyzer Cloud | 8.0.0 |
| Fortinet | FortiAnalyzer Cloud | 7.6.0 |
| Fortinet | FortiAnalyzer Cloud | 7.4.1 |
| Fortinet | FortiAnalyzer Cloud | 7.2.1 |
| Fortinet | FortiManager | 8.0.0 |
| Fortinet | FortiManager | 7.6.0 |
| Fortinet | FortiManager | 7.4.0 |
| Fortinet | FortiManager | 7.2.0 |
| Fortinet | FortiManager Cloud | 8.0.0 |
| Fortinet | FortiManager Cloud | 7.6.0 |
| Fortinet | FortiManager Cloud | 7.4.1 |
| Fortinet | FortiManager Cloud | 7.2.1 |