CVE-2026-126181

Name of the Vulnerable Software and Affected Versions FortiManager versions 8.0.0 through 8.0.1 FortiManager versions 7.6.0 through 7.6.7 FortiManager versions 7.4.0 through 7.4.11 FortiManager versions 7.2.x

Description An issue involving hard-coded credentials allows an authenticated attacker on an adjacent network with user permissions to join the FGFM configuration-sync mesh of the affected deployment by using the default pre-shared key.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.