PT-2026-144900

CVE-2026-126238

·

Published

2026-11-10

·

Updated

2026-11-11

Description by

CVSS 3.1
8.6
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to bypass authorization checks and gain unauthorized access to restricted functionality.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-863: Incorrect Authorization
Related identifiers
CVE-2026-126238
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com