Skip to content
OpenAdvisories
Critical · 9.3 CVE-2026-126253 EUVD-2026-123897GHSA-j3f4-wmxp-qvcr

A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4…

Published Nov 11, 2026 · Updated Nov 12, 2026 · Assigned by fortinet

Description

A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow an unauthenticated attacker to broadcast LSA via specially crafted request

Affected products

VendorProductAffectedFixed
Fortinet FortiOS 8.0.0 – ≤ 8.0.1, 7.6.0 – ≤ 7.6.7, 7.4.0 – ≤ 7.4.12, 7.2.0 – ≤ 7.2.13, 7.0.1 – ≤ 7.0.19 —

Advisories 2

References