CVE-2026-126180: High severity vulnerability

Published Nov 11, 2026

Updated

A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2 all versions may allow a low privileged Device Manager admin to obtain super admin privilege on managed FortiGates via injecting malicious commands.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade FortiManager Cloud to a version that resolves this vulnerability.
Fixed in 7.4.12
Upgrade
Upgrade FortiManager Cloud to a version that resolves this vulnerability.
Fixed in 7.6.8
Upgrade
Upgrade FortiManager Cloud to a version that resolves this vulnerability.
Fixed in 8.0.2
Upgrade
Upgrade FortiManager to a version that resolves this vulnerability.
Fixed in 7.4.12
Upgrade
Upgrade FortiManager to a version that resolves this vulnerability.
Fixed in 7.6.8
Upgrade
Upgrade FortiManager to a version that resolves this vulnerability.
Fixed in 8.0.2

Event History

Nov 11, 2026

CVE Published

via MITRE·09:30 PM

Data Sourced

via MITRE·09:30 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this vulnerability?

Exploitation requires a low-privileged Device Manager administrator account. An unauthenticated attacker is not described as able to exploit it.

What systems are at risk beyond FortiManager or FortiManager Cloud?

The impact extends to FortiGates managed by the affected FortiManager or FortiManager Cloud instance. Successful command injection may allow the attacker to obtain super-admin privileges on those managed FortiGates.

Which versions are affected?

Affected releases are FortiManager and FortiManager Cloud 8.0.0 through 8.0.1, 7.6.0 through 7.6.7, and 7.4.x through 7.4.11; FortiManager 7.4 starts at 7.4.0, while FortiManager Cloud 7.4 starts at 7.4.1. All 7.2 versions are affected for both products.

CVE-2026-126180: High severity vulnerability

Remediation

Event History

Frequently Asked Questions

Who can exploit this vulnerability?

What systems are at risk beyond FortiManager or FortiManager Cloud?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this vulnerability?

What systems are at risk beyond FortiManager or FortiManager Cloud?

Which versions are affected?