CVE-2026-126222

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 8.0.0 through 8.0.1 FortiAnalyzer versions 7.6.3 through 7.6.7 FortiAnalyzer Cloud versions 8.0.0 through 8.0.1 FortiAnalyzer Cloud versions 7.6.3 through 7.6.7 FortiManager versions 8.0.0 through 8.0.1 FortiManager versions 7.6.3 through 7.6.7 FortiManager Cloud versions 8.0.0 through 8.0.1 FortiManager Cloud versions 7.6.3 through 7.6.7

Description An improper limitation of a pathname to a restricted directory, known as path traversal, allows an authenticated attacker with admin privileges to execute unauthorized code or commands via crafted requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.