CVE-2026-126184: Authentication bypass by spoofing

Q: What does an attacker need to exploit this issue?

The CVSS vector indicates that exploitation is possible over the network, requires low attack complexity, and does not require prior privileges or user interaction.

Q: What is the expected security impact?

The reported impact is disruption of the HA state. The CVSS metrics indicate high availability impact, low integrity impact, and no confidentiality impact.

Q: Which Fortinet product deployments are identified as affected?

The advisory description identifies FortiAnalyzer, FortiAnalyzer Cloud, FortiAnalyzer-BigData, FortiManager, FortiManager Cloud, and FortiSASE-Sovereign fortilogd.

Published Nov 10, 2026

Updated

An authentication bypass by spoofing vulnerability (CWE-290) in FortiAnalyzer, FortiAnalyzer Cloud, FortiAnalyzer-BigData, FortiManager, FortiManager Cloud, FortiSASE-Sovereign fortilogd may allow an attacker to disrupt the HA state.

Affected Software

16 affected componentsFixes available

Fortinet FortiAnalyzer>=8.0.0<=8.0.1

Fortinet FortiAnalyzer>=7.6.0<=7.6.7

Fortinet FortiAnalyzer>=7.4.0<=7.4.11

Fortinet FortiAnalyzer>=7.2.0<=7.2.12

Fortinet FortiAnalyzer Cloud=.

Fortinet FortiAnalyzer Cloud>=7.6.0<=7.6.7

Fortinet FortiAnalyzer Cloud>=7.4.1<=7.4.11

Fortinet FortiAnalyzer Cloud>=7.2.1<=7.2.12

Fortinet FortiManager>=8.0.0<=8.0.1

Fortinet FortiManager>=7.6.0<=7.6.7

Fortinet FortiManager>=7.4.0<=7.4.11

Fortinet FortiManager>=7.2.0<=7.2.12

Fortinet FortiManager Cloud=.

Fortinet FortiManager Cloud>=7.6.0<=7.6.7

Fortinet FortiManager Cloud>=7.4.1<=7.4.11

Fortinet FortiManager Cloud>=7.2.1<=7.2.12

Event History

Nov 10, 2026

Advisory Published

via FortiGuard·12:00 AM

Data Sourced

via FortiGuard·12:00 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What does an attacker need to exploit this issue?

The CVSS vector indicates that exploitation is possible over the network, requires low attack complexity, and does not require prior privileges or user interaction.

What is the expected security impact?

The reported impact is disruption of the HA state. The CVSS metrics indicate high availability impact, low integrity impact, and no confidentiality impact.

Which Fortinet product deployments are identified as affected?

The advisory description identifies FortiAnalyzer, FortiAnalyzer Cloud, FortiAnalyzer-BigData, FortiManager, FortiManager Cloud, and FortiSASE-Sovereign fortilogd.

CVE-2026-126184: Authentication bypass by spoofing

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected security impact?

Which Fortinet product deployments are identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected security impact?

Which Fortinet product deployments are identified as affected?