CVE-2026-126215: High severity vulnerability
A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated administrator to escalate their privileges, bypass authorization controls or impersonate internal services via specially crafted requests to the GUI.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
FortiAnalyzer Cloudto a version that resolves this vulnerability.Fixed in 7.2.13 - Upgrade
Upgrade
FortiAnalyzer Cloudto a version that resolves this vulnerability.Fixed in 7.4.12 - Upgrade
Upgrade
FortiAnalyzer Cloudto a version that resolves this vulnerability.Fixed in 7.6.8 - Upgrade
Upgrade
FortiAnalyzer Cloudto a version that resolves this vulnerability.Fixed in 8.0.2 - Upgrade
Upgrade
FortiAnalyzerto a version that resolves this vulnerability.Fixed in 7.2.13 - Upgrade
Upgrade
FortiAnalyzerto a version that resolves this vulnerability.Fixed in 7.4.12 - Upgrade
Upgrade
FortiAnalyzerto a version that resolves this vulnerability.Fixed in 7.6.8 - Upgrade
Upgrade
FortiAnalyzerto a version that resolves this vulnerability.Fixed in 8.0.2 - Upgrade
Upgrade
FortiManager Cloudto a version that resolves this vulnerability.Fixed in 7.2.13 - Upgrade
Upgrade
FortiManager Cloudto a version that resolves this vulnerability.Fixed in 7.4.12 - Upgrade
Upgrade
FortiManager Cloudto a version that resolves this vulnerability.Fixed in 7.6.8 - Upgrade
Upgrade
FortiManager Cloudto a version that resolves this vulnerability.Fixed in 8.0.2 - Upgrade
Upgrade
FortiManagerto a version that resolves this vulnerability.Fixed in 7.2.13 - Upgrade
Upgrade
FortiManagerto a version that resolves this vulnerability.Fixed in 7.4.12 - Upgrade
Upgrade
FortiManagerto a version that resolves this vulnerability.Fixed in 7.6.8 - Upgrade
Upgrade
FortiManagerto a version that resolves this vulnerability.Fixed in 8.0.2
Event History
Frequently Asked Questions
Who can exploit this vulnerability?
Exploitation requires an authenticated administrator account. The attacker must be able to send specially crafted requests to the affected product's GUI; no user interaction is required.
Which deployments and versions are affected?
Affected releases include FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud across the listed 7.2, 7.4, 7.6, and 8.0 version ranges. The exact starting release differs for some Cloud 7.4 and 7.2 branches: FortiAnalyzer Cloud and FortiManager Cloud are listed from 7.4.1 and 7.2.1.
What could an authenticated administrator do with successful exploitation?
A successful attacker may escalate privileges, bypass authorization controls, or impersonate internal services. The provided severity vector indicates impacts to confidentiality, integrity, and availability, with integrity rated high.