CVE-2026-126217

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 8.0.0 through 8.0.1 FortiAnalyzer versions 7.6.0 through 7.6.7 FortiAnalyzer versions 7.4.0 through 7.4.11 FortiAnalyzer versions 7.2.0 through 7.2.12 FortiAnalyzer Cloud versions 8.0.0 through 8.0.1 FortiAnalyzer Cloud versions 7.6.0 through 7.6.7 FortiAnalyzer Cloud versions 7.4.1 through 7.4.11 FortiAnalyzer Cloud versions 7.2.1 through 7.2.12 FortiManager versions 8.0.0 through 8.0.1 FortiManager versions 7.6.0 through 7.6.7 FortiManager versions 7.4.0 through 7.4.11 FortiManager versions 7.2.0 through 7.2.12 FortiManager Cloud versions 8.0.0 through 8.0.1 FortiManager Cloud versions 7.6.0 through 7.6.7 FortiManager Cloud versions 7.4.1 through 7.4.11 FortiManager Cloud versions 7.2.1 through 7.2.12

Description An incorrect authorization issue exists where an authenticated administrator can escalate privileges, bypass authorization controls, or impersonate internal services. This is achieved by sending specially crafted requests to the GUI.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.