CVE-2026-126185

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 8.0.0 through 8.0.1 FortiAnalyzer versions 7.6.0 through 7.6.7 FortiAnalyzer versions 7.4.0 through 7.4.11 FortiAnalyzer Cloud versions 8.0.0 through 8.0.1 FortiAnalyzer Cloud versions 7.6.0 through 7.6.7 FortiAnalyzer Cloud versions 7.4.1 through 7.4.11 FortiManager versions 8.0.0 through 8.0.1 FortiManager versions 7.6.0 through 7.6.7 FortiManager versions 7.4.0 through 7.4.11 FortiManager Cloud versions 8.0.0 through 8.0.1 FortiManager Cloud versions 7.6.0 through 7.6.7 FortiManager Cloud versions 7.4.1 through 7.4.11

Description An improper control of code generation, known as code injection, allows an authenticated administrator to execute unauthorized commands or code by sending specially crafted requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.