CVE-2026-126219

Name of the Vulnerable Software and Affected Versions FortiAnalyzer version 8.0.0 FortiAnalyzer versions 7.6.0 through 7.6.7 FortiAnalyzer versions 7.4.0 through 7.4.11 FortiAnalyzer Cloud version 8.0.0 FortiAnalyzer Cloud versions 7.6.0 through 7.6.7 FortiAnalyzer Cloud versions 7.4.1 through 7.4.11 FortiManager version 8.0.0 FortiManager versions 7.6.0 through 7.6.7 FortiManager versions 7.4.0 through 7.4.11 FortiManager Cloud version 8.0.0 FortiManager Cloud versions 7.6.0 through 7.6.7 FortiManager Cloud versions 7.4.1 through 7.4.11

Description A path traversal issue exists where improper limitation of a pathname to a restricted directory allows an authenticated administrator to read or write arbitrary files or execute unauthorized code and commands through specially crafted requests sent to the GUI.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.