CVE-2026-126261: FGFM elevation before registration password is verified

Published Nov 10, 2026

Updated

An improper authorization vulnerability in FortiManager FGFM may allow an unauthenticated attacker that can reach the FGFM port to execute code or commands via crafted FGFM packets.

Affected Software

8 affected componentsFixes available

Fortinet FortiAnalyzer=.

Fortinet FortiAnalyzer>=7.6.0<=7.6.7

Fortinet FortiAnalyzer>=7.4

Fortinet FortiAnalyzer>=7.2

Fortinet FortiManager=.

Fortinet FortiManager>=7.6.0<=7.6.7

Fortinet FortiManager>=7.4

Fortinet FortiManager>=7.2

Event History

Nov 10, 2026

Advisory Published

via FortiGuard·12:00 AM

Data Sourced

via FortiGuard·12:00 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Who is exposed to exploitation?

FortiAnalyzer and FortiManager deployments are exposed if an unauthenticated attacker can reach the FGFM port. The issue is network-reachable and requires no privileges or user interaction.

What can an attacker do if exploitation succeeds?

An attacker may execute code or commands by sending crafted FGFM packets. The supplied severity vector indicates high potential impact to confidentiality, integrity, and availability.

CVE-2026-126261: FGFM elevation before registration password is verified

Affected Software

Event History

Frequently Asked Questions

Who is exposed to exploitation?

What can an attacker do if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to exploitation?

What can an attacker do if exploitation succeeds?