CVE-2026-126245

Name of the Vulnerable Software and Affected Versions FortiAuthenticator versions 8.0.0 through 8.0.3 FortiAuthenticator versions 6.6.0 through 6.6.10

Description An out-of-bounds write issue exists that allows an unauthenticated attacker to execute unauthorized code or commands via HTTP requests. This exploitation is possible if the attacker can bypass Address Space Layout Randomization (ASLR), a security technique that randomly arranges the address space positions of key data areas of a process to make it harder for an attacker to predict target addresses.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.