CVE-2026-126255

Name of the Vulnerable Software and Affected Versions FortiOS versions 8.0.0 through 8.0.1 FortiOS versions 7.6.0 through 7.6.7 FortiOS versions 7.4.0 through 7.4.12 FortiOS versions 7.2.0 through 7.2.13 FortiPAM versions 1.0 through 1.6

Description A path traversal issue exists where an unauthenticated attacker can bypass authentication by using specially crafted credentials. This is achieved through the use of the ../filedir path traversal sequence.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.