CVE-2026-126211: High severity vulnerability
A improper privilege management vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.1 through 7.6.7, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.1 through 7.6.8, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.1 through 7.6.7, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.1 through 7.6.8 may allow an authenticated privileged attacker to elevate their privileges via crafted JSON-RPC request.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FortiAnalyzer Cloudto a version that resolves this vulnerability.Fixed in 8.0.2 - Upgrade
Upgrade
FortiAnalyzerto a version that resolves this vulnerability.Fixed in 7.6.8 - Upgrade
Upgrade
FortiAnalyzerto a version that resolves this vulnerability.Fixed in 8.0.2 - Upgrade
Upgrade
FortiManager Cloudto a version that resolves this vulnerability.Fixed in 8.0.2 - Upgrade
Upgrade
FortiManagerto a version that resolves this vulnerability.Fixed in 7.6.8 - Upgrade
Upgrade
FortiManagerto a version that resolves this vulnerability.Fixed in 8.0.2
Event History
Frequently Asked Questions
Who can exploit this issue?
Exploitation requires an authenticated attacker who already has privileged access to an affected FortiAnalyzer, FortiManager, FortiAnalyzer Cloud, or FortiManager Cloud deployment. The attacker must be able to send a crafted JSON-RPC request.
Which versions are affected?
Affected versions are FortiAnalyzer and FortiManager 8.0.0 through 8.0.1 and 7.6.1 through 7.6.7. FortiAnalyzer Cloud and FortiManager Cloud are affected in 8.0.0 through 8.0.1 and 7.6.1 through 7.6.8.
What is the impact of successful exploitation?
A successful attack allows a privileged authenticated user to elevate their privileges. The supplied severity vector indicates high impacts to confidentiality, integrity, and availability.