CVE-2026-126218: Authorization bypass through user-controlled key

Q: Who is exposed to this issue?

Fortinet FortiManager deployments are exposed if a remote attacker can authenticate with admin permission and reach the HTTP interface.

Q: What does an attacker need to exploit it?

The attacker needs an authenticated account with admin permission. Exploitation is performed remotely using crafted HTTP requests and does not require user interaction.

Q: What is the likely impact of successful exploitation?

A successful attacker may elevate privileges to root. The stated impact includes high integrity impact, along with low confidentiality and availability impact.

Published Nov 10, 2026

Updated

An Authorization Bypass Through User-Controlled Key vulnerability [CWE-639] in FortiManager may allow a remote authenticated attacker with admin permission to elevate their privileges to root via crafted HTTP requests.

Affected Software

3 affected componentsFixes available

Fortinet FortiManager>=8.0.0<=8.0.1

Fortinet FortiManager>=7.6.0<=7.6.7

Fortinet FortiManager>=7.4.0<=7.4.11

Event History

Nov 10, 2026

Advisory Published

via FortiGuard·12:00 AM

Data Sourced

via FortiGuard·12:00 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Who is exposed to this issue?

Fortinet FortiManager deployments are exposed if a remote attacker can authenticate with admin permission and reach the HTTP interface.

What does an attacker need to exploit it?

The attacker needs an authenticated account with admin permission. Exploitation is performed remotely using crafted HTTP requests and does not require user interaction.

What is the likely impact of successful exploitation?

A successful attacker may elevate privileges to root. The stated impact includes high integrity impact, along with low confidentiality and availability impact.

CVE-2026-126218: Authorization bypass through user-controlled key

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the likely impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the likely impact of successful exploitation?