CVE-2026-126232

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 8.0.0 through 8.0.1 FortiAnalyzer versions 7.6.0 through 7.6.7 FortiAnalyzer versions 7.4.0 through 7.4.11 FortiAnalyzer version 7.2 FortiAnalyzer Cloud version 8.0.1 FortiAnalyzer Cloud versions 7.6.0 through 7.6.7 FortiAnalyzer Cloud versions 7.4.1 through 7.4.11 FortiAnalyzer Cloud version 7.2 FortiManager versions 8.0.0 through 8.0.1 FortiManager versions 7.6.0 through 7.6.7 FortiManager versions 7.4.0 through 7.4.11 FortiManager version 7.2 FortiManager Cloud version 8.0.1 FortiManager Cloud versions 7.6.0 through 7.6.7 FortiManager Cloud versions 7.4.1 through 7.4.11 FortiManager Cloud version 7.2

Description Improper certificate validation may allow a Man-in-the-Middle (MITM) attacker to impersonate the RADIUS server by using a rogue RADIUS server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.