CVE-2026-126259

Name of the Vulnerable Software and Affected Versions Fortinet FortiOS version 8.0.0 Fortinet FortiOS versions 7.6.0 through 7.6.7 Fortinet FortiOS versions 7.4.0 through 7.4.12 Fortinet FortiOS versions 7.2.0 through 7.2.13

Description A missing authentication for critical function allows an unauthenticated attacker to execute commands as a super admin. This is possible by sending crafted HA packets when the system is configured with HA FGSP + standalone-config-sync or autoscale.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.