Skip to content
OpenAdvisories
Critical · 9.8 Public exploit CVE-2026-126170 EUVD-2026-123844GHSA-rm98-fc32-9ggj

A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.6.0 through 7.6.7, F…

Published Nov 11, 2026 · Updated Nov 14, 2026 · Assigned by fortinet

Vendor: Fortinet Product: FortiAnalyzer Product: FortiAnalyzer Cloud Product: FortiAnalyzer-BigData Product: FortiManager Product: FortiManager Cloud Category: Network devices

Description

A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer Cloud 8.0.1 through 8.0.2, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer-BigData 7.6.0 through 7.6.2, FortiManager 8.0.0 through 8.0.2, FortiManager 7.6.0 through 7.6.7, FortiManager Cloud 8.0.1 through 8.0.2, FortiManager Cloud 7.6.0 through 7.6.7 may allow an unauthenticated attacker to execute unauthorized code or commands via a specially crafted HTTP request

Affected products

VendorProductAffectedFixed
Fortinet FortiManager 8.0.0 – ≤ 8.0.2, 7.6.0 – ≤ 7.6.7 —
Fortinet FortiAnalyzer 8.0.0 – ≤ 8.0.2, 7.6.0 – ≤ 7.6.7 —
Fortinet FortiManager Cloud 8.0.1 – ≤ 8.0.2, 7.6.0 – ≤ 7.6.7 —
Fortinet FortiAnalyzer Cloud 8.0.1 – ≤ 8.0.2, 7.6.0 – ≤ 7.6.7 —
Fortinet FortiAnalyzer-BigData 7.6.0 – ≤ 7.6.2 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 3 repositories

  • foxcornlab/fortinet-scanner ★ 0 · Nov 13, 2026

    Detection-only triage for the Fortinet November 2026 PSIRT batch: CVE-2026-126170 (9.8), CVE-2026-126254 (9.6), CVE-2026-126253 (9.3), CVE-2026-126262 (9.3), CVE-2026-126229 (9.1), CVE-2026-126261 (9…

  • googlesky/CVE-2026-126170 ★ 0 · Nov 12, 2026

    Containerised PoC for CVE-2026-126170 (Fortinet FG-IR-26-219): a JSON injection (CWE-116) in the FortiManager/FortiAnalyzer JRPC API lets an unauthenticated crafted request reach command execution an…

  • Ghost-Bx1/cve-2026-126170-fortimanager-jsonrpc-rce ★ 0 · Nov 11, 2026

    CVE-2026-126170 - FortiManager JSON-RPC RCE (CVSS 9.8)

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 2

References