Description
A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer Cloud 8.0.0, FortiManager 8.0.0, FortiManager Cloud 8.0.0 may allow an authenticated attacker with restricted privileges to execute unauthorized code or commands via a specially crafted request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiManager | 8.0.0 | — |
| Fortinet | FortiAnalyzer | 8.0.0 | — |
| Fortinet | FortiManager Cloud | 8.0.0 | — |
| Fortinet | FortiAnalyzer Cloud | 8.0.0 | — |
Advisories 2
- NCSC-2026-0488 Kwetsbaarheden verholpen in Fortinet FortiManager en FortiAnalyzer NCSC-NL (Netherlands) · Nov 12, 2026
- WID-SEC-2026-4489 Fortinet Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026