Main Vulnerability Database Vulnerabilities #VU165254

Improper Authorization in FortiAnalyzer and FortiManager - CVE-2026-126261

Published: November 11, 2026

Vulnerability identifier: #VU165254

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-126261

CWE-ID: CWE-285

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute unauthorized code or commands.

The vulnerability exists due to improper authorization in the FGFM component of FortiManager and FortiAnalyzer when granting elevated access before the registration password is verified. A remote attacker can send crafted FGFM packets to a reachable FGFM port to execute unauthorized code or commands.

Affected software

FortiAnalyzer
FortiManager

How to mitigate CVE-2026-126261

Install security update from vendor's website.

FortiAnalyzer - addressed in versions 7.6.8, 8.0.1
FortiManager - addressed in versions 7.6.8, 8.0.1

External References

https://www.fortiguard.com/psirt/FG-IR-26-275

Related Security Bulletins