Skip to content
OpenAdvisories
Critical · 9.0 CVE-2026-126261 EUVD-2026-123051GHSA-952j-p3c7-fpqx

A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5, …

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by fortinet

Description

A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.8 may allow an unauthenticated attacker that can reach the FGFM port to execute code or commands via crafted FGFM packets.

Affected products

VendorProductAffectedFixed
Fortinet FortiManager 8.0.0, 7.6.0 – ≤ 7.6.7, 7.4.0 – ≤ 7.4.5, 7.2.0 – ≤ 7.2.8 —

Advisories 2

References