CVE-2026-126261 A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.8 may allow an unauthenticated...
CriticalCVSS 9.0
- Published
- Updated
- Exploit status
- No public exploit known
Description
A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.8 may allow an unauthenticated attacker that can reach the FGFM port to execute code or commands via crafted FGFM packets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fortinet fortimanager | = 8.0.0 | No fix listed |
| fortinet fortimanager | >= 7.6.0, <= 7.6.7 | No fix listed |
| fortinet fortimanager | >= 7.4.0, <= 7.4.5 | No fix listed |
| fortinet fortimanager | >= 7.2.0, <= 7.2.8 | No fix listed |