CVE-2026-126229

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 8.0.0 through 8.0.1 FortiAnalyzer versions 7.6.0 through 7.6.7 FortiAnalyzer versions 7.4.0 through 7.4.11 FortiAnalyzer version 7.2 FortiAnalyzer Cloud version 8.0.1 FortiAnalyzer Cloud versions 7.6.0 through 7.6.7 FortiAnalyzer Cloud versions 7.4.1 through 7.4.11 FortiAnalyzer Cloud version 7.2 FortiManager versions 8.0.0 through 8.0.1 FortiManager versions 7.6.0 through 7.6.7 FortiManager versions 7.4.0 through 7.4.11 FortiManager version 7.2 FortiManager Cloud version 8.0.1 FortiManager Cloud versions 7.6.0 through 7.6.7 FortiManager Cloud versions 7.4.1 through 7.4.11 FortiManager Cloud version 7.2

Description An authorization bypass exists that allows an authenticated administrator to gain access to other VDOMs (Virtual Domains) by using specially crafted HTTP requests. This issue is caused by a user-controlled key vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.