CVE-2026-126214: High severity vulnerability
A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12 may allow an authenticated administrator to escalate their privileges, bypass authorization controls or impersonate internal services via specially crafted requests to the GUI.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FortiAnalyzer Cloudto a version that resolves this vulnerability.Fixed in 7.2.13 - Upgrade
Upgrade
FortiAnalyzer Cloudto a version that resolves this vulnerability.Fixed in 7.4.12 - Upgrade
Upgrade
FortiAnalyzer Cloudto a version that resolves this vulnerability.Fixed in 7.6.8 - Upgrade
Upgrade
FortiAnalyzer Cloudto a version that resolves this vulnerability.Fixed in 8.0.2 - Upgrade
Upgrade
FortiAnalyzerto a version that resolves this vulnerability.Fixed in 7.2.13 - Upgrade
Upgrade
FortiAnalyzerto a version that resolves this vulnerability.Fixed in 7.4.12 - Upgrade
Upgrade
FortiAnalyzerto a version that resolves this vulnerability.Fixed in 7.6.8 - Upgrade
Upgrade
FortiAnalyzerto a version that resolves this vulnerability.Fixed in 8.0.2 - Upgrade
Upgrade
FortiManagerto a version that resolves this vulnerability.Fixed in 7.2.13 - Upgrade
Upgrade
FortiManagerto a version that resolves this vulnerability.Fixed in 7.4.12 - Upgrade
Upgrade
FortiManagerto a version that resolves this vulnerability.Fixed in 7.6.8 - Upgrade
Upgrade
FortiManagerto a version that resolves this vulnerability.Fixed in 8.0.2
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
An authenticated administrator is required. The issue is exploitable over the network through specially crafted requests to the GUI, so unauthenticated attackers are not described as able to exploit it.
Which deployments and releases are affected?
Affected products include FortiAnalyzer, FortiAnalyzer Cloud, and FortiManager in the listed 7.2, 7.4, 7.6, and 8.0 release ranges. FortiManager 8.0.0 is specifically listed; no later 8.0 FortiManager versions are identified in the provided data.
What could a successful attacker do?
A compromised or malicious administrator may escalate privileges, bypass authorization controls, or impersonate internal services. The assigned severity vector indicates high impacts to confidentiality, integrity, and availability.