CVE-2026-126176

Name of the Vulnerable Software and Affected Versions FortiAnalyzer version 8.0.0 FortiAnalyzer versions 7.6.0 through 7.6.7 FortiAnalyzer versions 7.4.0 through 7.4.11 FortiAnalyzer versions 7.2.0 through 7.2.12 FortiAnalyzer Cloud version 8.0.0 FortiAnalyzer Cloud versions 7.6.0 through 7.6.7 FortiAnalyzer Cloud versions 7.4.1 through 7.4.11 FortiAnalyzer Cloud versions 7.2.1 through 7.2.12 FortiManager version 8.0.0 FortiManager versions 7.6.0 through 7.6.7 FortiManager versions 7.4.0 through 7.4.11 FortiManager versions 7.2.0 through 7.2.12 FortiManager Cloud version 8.0.0 FortiManager Cloud versions 7.6.0 through 7.6.7 FortiManager Cloud versions 7.4.1 through 7.4.11 FortiManager Cloud versions 7.2.1 through 7.2.12

Description An XML injection issue, also known as blind XPath injection, allows an unauthenticated remote attacker to inject arbitrary content into a signed SAML response by using specially crafted SAML requests. XML injection occurs when an application processes external XML input without sufficient validation, allowing the attacker to interfere with the XML logic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.