CVE-2026-126221

Name of the Vulnerable Software and Affected Versions FortiAnalyzer version 8.0.0 FortiAnalyzer versions 7.6.0 through 7.6.7 FortiAnalyzer versions 7.4.0 through 7.4.11 FortiAnalyzer Cloud version 8.0.0 FortiAnalyzer Cloud versions 7.6.0 through 7.6.7 FortiAnalyzer Cloud versions 7.4.1 through 7.4.11 FortiManager version 8.0.0 FortiManager versions 7.6.0 through 7.6.7 FortiManager versions 7.4.0 through 7.4.11 FortiManager Cloud version 8.0.0 FortiManager Cloud versions 7.6.0 through 7.6.7 FortiManager Cloud versions 7.4.1 through 7.4.11

Description An injection issue exists where special elements in output used by a downstream component are not properly neutralized. This allows an authenticated administrator to read or write arbitrary files or execute unauthorized code and commands by sending specially crafted requests to the GUI.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.