CVE-2026-126213

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 8.0.0 through 8.0.1 FortiAnalyzer versions 7.6.0 through 7.6.7 FortiAnalyzer version 7.4 FortiAnalyzer version 7.2 FortiAnalyzer Cloud versions 8.0.0 through 8.0.1 FortiAnalyzer Cloud versions 7.6.0 through 7.6.7 FortiAnalyzer Cloud versions 7.4.1 through 7.4.11 FortiAnalyzer Cloud versions 7.2.1 through 7.2.12 FortiManager versions 8.0.0 through 8.0.1 FortiManager versions 7.6.0 through 7.6.7 FortiManager versions 7.4.0 through 7.4.11 FortiManager versions 7.2.0 through 7.2.12 FortiManager Cloud versions 8.0.0 through 8.0.1 FortiManager Cloud versions 7.6.0 through 7.6.7 FortiManager Cloud versions 7.4.1 through 7.4.11 FortiManager Cloud versions 7.2.1 through 7.2.12

Description An improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authenticated attacker to execute unauthorized SQL commands by sending specially crafted requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.