CVE-2026-126212: Heap-based buffer overflow

Q: Who can exploit this vulnerability?

An authenticated administrator is required to exploit the issue. The attacker must be able to send specially crafted JSON-RPC requests to an affected FortiManager, FortiManager Cloud, FortiAnalyzer, or FortiAnalyzer Cloud instance.

Q: What could successful exploitation allow?

Successful exploitation may allow unauthorized code execution, unauthorized command execution, or denial of service. The vulnerability affects confidentiality, integrity, and availability.

Q: Is this exploitable without administrator access?

The provided information identifies high privileges as a requirement, specifically authenticated administrator access. It does not indicate that unauthenticated or lower-privileged users can exploit it.

Published Nov 10, 2026

Updated

A Heap-based Buffer Overflow vulnerability [CWE-122] in FortiManager, FortiManager Cloud, FortiAnalyzer and FortiAnalyzer Cloud may allow an authenticated administrator to execute unauthorized code or commands or cause a denial of service via specially crafted JSON-RPC requests.

Affected Software

12 affected componentsFixes available

Fortinet FortiAnalyzer>=8.0.0<=8.0.1

Fortinet FortiAnalyzer>=7.6.0<=7.6.7

Fortinet FortiAnalyzer>=7.4.0<=7.4.11

Fortinet FortiAnalyzer Cloud>=8.0.0<=8.0.1

Fortinet FortiAnalyzer Cloud>=7.6.0<=7.6.7

Fortinet FortiAnalyzer Cloud>=7.4.1<=7.4.11

Fortinet FortiManager>=8.0.0<=8.0.1

Fortinet FortiManager>=7.6.0<=7.6.7

Fortinet FortiManager>=7.4.0<=7.4.11

Fortinet FortiManager Cloud>=8.0.0<=8.0.1

Fortinet FortiManager Cloud>=7.6.0<=7.6.7

Fortinet FortiManager Cloud>=7.4.1<=7.4.11

Event History

Nov 10, 2026

Advisory Published

via FortiGuard·12:00 AM

Data Sourced

via FortiGuard·12:00 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Who can exploit this vulnerability?

An authenticated administrator is required to exploit the issue. The attacker must be able to send specially crafted JSON-RPC requests to an affected FortiManager, FortiManager Cloud, FortiAnalyzer, or FortiAnalyzer Cloud instance.

What could successful exploitation allow?

Successful exploitation may allow unauthorized code execution, unauthorized command execution, or denial of service. The vulnerability affects confidentiality, integrity, and availability.

Is this exploitable without administrator access?

The provided information identifies high privileges as a requirement, specifically authenticated administrator access. It does not indicate that unauthenticated or lower-privileged users can exploit it.

CVE-2026-126212: Heap-based buffer overflow

Affected Software

Event History

Frequently Asked Questions

Who can exploit this vulnerability?

What could successful exploitation allow?

Is this exploitable without administrator access?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this vulnerability?

What could successful exploitation allow?

Is this exploitable without administrator access?