FG-IR-26-228: Authorization bypass through user-controlled key in GUI

Published Nov 10, 2026

Updated

An Authorization Bypass Through User-Controlled Key vulnerability [cwe-639] in FortiManager, FortiManager Cloud and FortiSase-Sovereign GUI may allow an authenticated attacker to execute commands outside of the expected scope via specially crafted HTTP request.

Affected Software

12 affected componentsFixes available

Fortinet FortiManager>=8.0.0<=8.0.1

Fortinet FortiManager>=7.6.0<=7.6.7

Fortinet FortiManager>=7.4.0<=7.4.11

Fortinet FortiManager>=7.2.0<=7.2.12

Fortinet FortiManager Cloud=.

Fortinet FortiManager Cloud>=7.6.0<=7.6.7

Fortinet FortiManager Cloud>=7.4.1<=7.4.11

Fortinet FortiManager Cloud>=7.2.1<=7.2.12

Fortinet FortiSASE-Sovereign>=26.2

Fortinet FortiSASE-Sovereign>=25.4

Fortinet FortiSASE-Sovereign>=25.3

Fortinet FortiSASE-Sovereign>=25

Event History

Nov 10, 2026

Advisory Published

via FortiGuard·12:00 AM

Data Sourced

via FortiGuard·12:00 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Exploitation requires an authenticated attacker with high privileges. The issue is not described as exploitable by an unauthenticated user.

What is the potential impact after exploitation?

A successful attacker may execute commands outside their expected scope by sending a specially crafted HTTP request to the GUI. The supplied severity vector indicates integrity and availability impacts, with scope change.

FG-IR-26-228: Authorization bypass through user-controlled key in GUI

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact after exploitation?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What is the potential impact after exploitation?