CVE-2026-126180

Name of the Vulnerable Software and Affected Versions FortiManager versions 8.0.0 through 8.0.1 FortiManager versions 7.6.0 through 7.6.7 FortiManager versions 7.4.0 through 7.4.11 FortiManager version 7.2 FortiManager Cloud versions 8.0.0 through 8.0.1 FortiManager Cloud versions 7.6.0 through 7.6.7 FortiManager Cloud versions 7.4.1 through 7.4.11 FortiManager Cloud version 7.2

Description Improper neutralization of special elements used in a template engine allows a low privileged Device Manager admin to obtain super admin privileges on managed FortiGates by injecting malicious commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.