CVE-2026-126235

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 8.0.0 through 8.0.1 FortiAnalyzer versions 7.6.2 through 7.6.7 FortiAnalyzer versions 7.4.7 through 7.4.11 FortiAnalyzer versions 7.2.10 through 7.2.12 FortiAnalyzer Cloud versions 8.0.0 through 8.0.1 FortiAnalyzer Cloud versions 7.6.0 through 7.6.7 FortiAnalyzer Cloud versions 7.4.1 through 7.4.11 FortiAnalyzer Cloud versions 7.2.1 through 7.2.12 FortiManager versions 8.0.0 through 8.0.1 FortiManager versions 7.6.2 through 7.6.7 FortiManager versions 7.4.7 through 7.4.11 FortiManager versions 7.2.10 through 7.2.12 FortiManager Cloud versions 8.0.0 through 8.0.1 FortiManager Cloud versions 7.6.0 through 7.6.7 FortiManager Cloud versions 7.4.1 through 7.4.11 FortiManager Cloud versions 7.2.1 through 7.2.12

Description A path traversal issue exists where improper limitation of a pathname to a restricted directory allows an authenticated administrator to write arbitrary files by using a specially crafted archive.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.