Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Fortinet FortiAnalyzerImproper neutralization of special elements used in a template engine in fortisoc

Risk 66
Severity
7.2
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R

A Use of Externally-Controlled Format String [CWE-134] in FortiManager, FortiAnalyzer, FortiManager Cloud and FortiAnalyzer Cloud API may allow an authenticated attacker to execute unauthorized commands via specially crafted HTTP request

First published (updated )
Advisory
FG-IR-26-220

Fortinet FortiAnalyzerImproper neutralization of special elements used in a template engine in fortisoc

Risk 66
Severity
7.2
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:R

A Use of Externally-Controlled Format String [CWE-134] in FortiManager, FortiAnalyzer, FortiManager Cloud and FortiAnalyzer Cloud API may allow an authenticated attacker to execute unauthorized commands via specially crafted HTTP request

First published (updated )
CVE-2026-126171

Fortinet FortiAnalyzerImproper control of generation of code

Risk 66
Severity
7.2
Code Injection
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

A Code Injection vulnerability [CWE-94] in FortiManager, FortiManager Cloud, FortiAnalyzer and FortiAnalyzer Cloud may allow an authenticated administrator to execute unauthorized code or commands via specially crafted requests.

First published (updated )
Advisory
FG-IR-26-230

Fortinet FortiAnalyzerImproper neutralization of argument delimiters in a command

Risk 66
Severity
7.2
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C

An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')[CWE-88] vulnerability in FortiManager,FortiAnalyzer, FortiManager Cloud, FortiAnalyzer Cloud may allow an authenticated privileged admin user to execute unauthorized code or commands.

First published (updated )
Advisory
FG-IR-26-239

Fortinet FortiAnalyzerHeap-based buffer overflow

Risk 66
Severity
7.2
Buffer Overflow
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

A Heap-based Buffer Overflow vulnerability [CWE-122] in FortiManager, FortiAnalyzer, FortiManager Cloud and FortiAnalyzer Cloud may allow an authenticated attacker with admin privileges to execute unauthorized code or commands via a crafted request.

First published (updated )
CVE-2026-126178

Fortinet FortiAnalyzerHeap-based buffer overflow

Risk 66
Severity
7.2
Buffer Overflow
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

A Heap-based Buffer Overflow vulnerability [CWE-122] in FortiManager, FortiAnalyzer, FortiManager Cloud and FortiAnalyzer Cloud may allow an authenticated attacker with admin privileges to execute unauthorized code or commands via a crafted request.

First published (updated )
Advisory
FG-IR-26-223

Fortinet FortiAnalyzerImproper control of generation of code

Risk 66
Severity
7.2
Code Injection
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

A Code Injection vulnerability [CWE-94] in FortiManager, FortiManager Cloud, FortiAnalyzer and FortiAnalyzer Cloud may allow an authenticated administrator to execute unauthorized code or commands via specially crafted requests.

First published (updated )
CVE-2026-126185

Fortinet FortiAnalyzerImproper certificate validation in RADIUS protocol

Risk 70
Severity
7.5
AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

An Improper Certificate Validation vulnerability [CWE-295] in FortiSASE Sovereign, FortiManager, Fortianalyzer, FortiManager Cloud and FortiAnalyzer Cloud RADIUS protocol may allow a MITM attacker to impersonate the radius server via a rogue RADIUS server.

First published (updated )
Advisory
FG-IR-26-247

Fortinet FortiAnalyzerImproper certificate validation in RADIUS protocol

Risk 70
Severity
7.5
AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

An Improper Certificate Validation vulnerability [CWE-295] in FortiSASE Sovereign, FortiManager, Fortianalyzer, FortiManager Cloud and FortiAnalyzer Cloud RADIUS protocol may allow a MITM attacker to impersonate the radius server via a rogue RADIUS server.

First published (updated )
CVE-2026-126232

Fortinet FortiAnalyzerAuthentication bypass by spoofing

Risk 54
Severity
8.2
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H/E:P/RL:O/RC:C

An authentication bypass by spoofing vulnerability (CWE-290) in FortiAnalyzer, FortiAnalyzer Cloud, FortiAnalyzer-BigData, FortiManager, FortiManager Cloud, FortiSASE-Sovereign fortilogd may allow an attacker to disrupt the HA state.

First published (updated )
Advisory
FG-IR-26-229

Fortinet FortiAnalyzerImproper neutralization of argument delimiters in a command

Risk 66
Severity
7.2
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C

An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')[CWE-88] vulnerability in FortiManager,FortiAnalyzer, FortiManager Cloud, FortiAnalyzer Cloud may allow an authenticated privileged admin user to execute unauthorized code or commands.

First published (updated )
CVE-2026-126224

Fortinet FortiAnalyzerAuthentication bypass by spoofing

Risk 54
Severity
8.2
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H/E:P/RL:O/RC:C

An authentication bypass by spoofing vulnerability (CWE-290) in FortiAnalyzer, FortiAnalyzer Cloud, FortiAnalyzer-BigData, FortiManager, FortiManager Cloud, FortiSASE-Sovereign fortilogd may allow an attacker to disrupt the HA state.

First published (updated )
CVE-2026-126184

Fortinet FortiAnalyzerImproper limitation of a pathname to a restricted directory

Risk 66
Severity
7.2
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

An External Control of File Name or Path vulnerability [CWE-22] and an Improper Neutralization of Special Elements vulnerability [CWE-74] in FortiManager, FortiManager Cloud, FortiAnalyzer, and FortiAnalyzer Cloud may allow an authenticated administrator to read or write arbitrary files or execute unauthorized code or commands via specially crafted requests to the GUI.

First published (updated )
Advisory
FG-IR-26-236

Fortinet FortiAnalyzerImproper limitation of a pathname to a restricted directory

Risk 66
Severity
7.2
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

An External Control of File Name or Path vulnerability [CWE-22] and an Improper Neutralization of Special Elements vulnerability [CWE-74] in FortiManager, FortiManager Cloud, FortiAnalyzer, and FortiAnalyzer Cloud may allow an authenticated administrator to read or write arbitrary files or execute unauthorized code or commands via specially crafted requests to the GUI.

First published (updated )
CVE-2026-126219

Fortinet FortiAnalyzerImproper limitation of a pathname to a restricted directory in apache_mod

Risk 66
Severity
7.2
Path Traversal
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

A Path Traversal vulnerability [CWE-22] in FortiManager, FortiManager Cloud, FortiAnalyzer and FortiAnalyzer Cloud may allow an authenticated administrator to write arbitrary files via a specially crafted archive.

First published (updated )
Advisory
FG-IR-26-250

Fortinet FortiAnalyzerImproper limitation of a pathname to a restricted directory in apache_mod

Risk 66
Severity
7.2
Path Traversal
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

A Path Traversal vulnerability [CWE-22] in FortiManager, FortiManager Cloud, FortiAnalyzer and FortiAnalyzer Cloud may allow an authenticated administrator to write arbitrary files via a specially crafted archive.

First published (updated )
CVE-2026-126235

Fortinet FortiAnalyzerHeap-based buffer overflow

Risk 66
Severity
7.2
Buffer Overflow
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

A Heap-based Buffer Overflow vulnerability [CWE-122] in FortiManager, FortiManager Cloud, FortiAnalyzer and FortiAnalyzer Cloud may allow an authenticated administrator to execute unauthorized code or commands or cause a denial of service via specially crafted JSON-RPC requests.

First published (updated )
Advisory
FG-IR-26-232

Fortinet FortiAnalyzerHeap-based buffer overflow

Risk 66
Severity
7.2
Buffer Overflow
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

A Heap-based Buffer Overflow vulnerability [CWE-122] in FortiManager, FortiManager Cloud, FortiAnalyzer and FortiAnalyzer Cloud may allow an authenticated administrator to execute unauthorized code or commands or cause a denial of service via specially crafted JSON-RPC requests.

First published (updated )
CVE-2026-126212

Fortinet FortiAnalyzerImproper control of generation of code in GUI

Risk 66
Severity
7.2
Buffer Overflow, Code Injection
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R

An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] and a Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability [CWE-120] in FortiManager, FortiAnalyzer, FortiManager Cloud, and FortiAnalyzer Cloud may allow a remote authenticated attacker to execute unauthorized code or commands via crafted HTTP requests.

First published (updated )
Advisory
FG-IR-26-227

Fortinet FortiAnalyzerImproper control of generation of code in GUI

Risk 66
Severity
7.2
Buffer Overflow, Code Injection
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R

An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] and a Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability [CWE-120] in FortiManager, FortiAnalyzer, FortiManager Cloud, and FortiAnalyzer Cloud may allow a remote authenticated attacker to execute unauthorized code or commands via crafted HTTP requests.

First published (updated )
CVE-2026-126182

Fortinet FortiAnalyzerAuthorization bypass through user-controlled key in dmserver

Risk 72
Severity
9.1
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C

An Authorization Bypass Through User-Controlled Key [CWE-639] in FortiManager, FortiAnalyzer, FortiManager Cloud and FortiAnalyzer Cloud could allow an authenticated administrator to access to other VDOMs via specially crafted HTTP requests.

First published (updated )
Advisory
FG-IR-26-244

Fortinet FortiAnalyzerAuthorization bypass through user-controlled key in dmserver

Risk 72
Severity
9.1
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C

An Authorization Bypass Through User-Controlled Key [CWE-639] in FortiManager, FortiAnalyzer, FortiManager Cloud and FortiAnalyzer Cloud could allow an authenticated administrator to access to other VDOMs via specially crafted HTTP requests.

First published (updated )
CVE-2026-126229

Fortinet FortiAnalyzerImproper limitation of a pathname to a restricted directory

Risk 66
Severity
7.2
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

An External Control of File Name or Path vulnerability [CWE-22] and an Improper Neutralization of Special Elements vulnerability [CWE-74] in FortiManager, FortiManager Cloud, FortiAnalyzer, and FortiAnalyzer Cloud may allow an authenticated administrator to read or write arbitrary files or execute unauthorized code or commands via specially crafted requests to the GUI.

First published (updated )
CVE-2026-126220

Fortinet FortiAnalyzerImproper limitation of a pathname to a restricted directory

Risk 66
Severity
7.2
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

An External Control of File Name or Path vulnerability [CWE-22] and an Improper Neutralization of Special Elements vulnerability [CWE-74] in FortiManager, FortiManager Cloud, FortiAnalyzer, and FortiAnalyzer Cloud may allow an authenticated administrator to read or write arbitrary files or execute unauthorized code or commands via specially crafted requests to the GUI.

First published (updated )
CVE-2026-126221

Fortinet FortiAnalyzerMultiple Arbitrary File Read/Write via SQL Injection

Risk 76
Severity
7.9
SQL Injection
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiAnalyzer, FortiManager, FortiManager Cloud and FortiAnalyzer Cloud may allow a low privileged user to execute arbitrary commands via crafted requests.

1 / 2
Source: FortiGuard
First published (updated )
CVE-2026-23705

Fortinet FortiOSHeap Overflow in fgfmsd

Risk 66
Severity
7.2
Buffer Overflow
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:R

A heap-based buffer overflow vulnerability [CWE-122] in FortiOS, FortiManager, FortiAnalyzer, FortiManager Cloud, FortiAnalyzer Cloud, FortiProxy fgfmd daemon may allow an authenticated attacker to execute arbitrary code or commands via specifically crafted requests.

1 / 2
Source: FortiGuard
First published (updated )
CVE-2024-50571

Fortinet FortiAnalyzerMultiple Arbitrary File Read/Write via SQL Injection

Risk 76
Severity
7.9
SQL Injection
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiAnalyzer, FortiManager, FortiManager Cloud and FortiAnalyzer Cloud may allow a low privileged user to execute arbitrary commands via crafted requests.

1 / 2
Source: FortiGuard
First published (updated )
CVE-2026-23706

Fortinet FortiAnalyzerMultiple Arbitrary File Read/Write via SQL Injection

Risk 79
Severity
8.8
SQL Injection
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiAnalyzer, FortiManager, FortiManager Cloud and FortiAnalyzer Cloud may allow a low privileged user to execute arbitrary commands via crafted requests.

1 / 2
Source: FortiGuard
First published (updated )
CVE-2025-46773

Fortinet FortiAnalyzerMultiple Arbitrary File Read/Write via SQL Injection

Risk 76
Severity
7.9
SQL Injection
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiAnalyzer, FortiManager, FortiManager Cloud and FortiAnalyzer Cloud may allow a low privileged user to execute arbitrary commands via crafted requests.

1 / 2
Source: FortiGuard
First published (updated )
CVE-2026-23707

Fortinet FortiAnalyzerMultiple Arbitrary File Read/Write via SQL Injection

Risk 76
Severity
7.9
SQL Injection
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiAnalyzer, FortiManager, FortiManager Cloud and FortiAnalyzer Cloud may allow a low privileged user to execute arbitrary commands via crafted requests.

First published (updated )
Advisory
FG-IR-26-178

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203