CVE-2026-126217
HIGHAttack Surface
CVSS Vector Breakdown
Description
A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated administrator to escalate their privileges, bypass authorization controls or impersonate internal services via specially crafted requests to the GUI.
Weakness Classification (1)
Affected Software (16)
| Vendor | Product | Version |
|---|---|---|
| Fortinet | FortiAnalyzer | 8.0.0 |
| Fortinet | FortiAnalyzer | 7.6.0 |
| Fortinet | FortiAnalyzer | 7.4.0 |
| Fortinet | FortiAnalyzer | 7.2.0 |
| Fortinet | FortiAnalyzer Cloud | 8.0.0 |
| Fortinet | FortiAnalyzer Cloud | 7.6.0 |
| Fortinet | FortiAnalyzer Cloud | 7.4.1 |
| Fortinet | FortiAnalyzer Cloud | 7.2.1 |
| Fortinet | FortiManager | 8.0.0 |
| Fortinet | FortiManager | 7.6.0 |
| Fortinet | FortiManager | 7.4.0 |
| Fortinet | FortiManager | 7.2.0 |
| Fortinet | FortiManager Cloud | 8.0.0 |
| Fortinet | FortiManager Cloud | 7.6.0 |
| Fortinet | FortiManager Cloud | 7.4.1 |
| Fortinet | FortiManager Cloud | 7.2.1 |