CVE-2026-126261

Published 10 November 2026 · tracked since 11 November 2026

Description

A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.8 may allow an unauthenticated attacker that can reach the FGFM port to execute code or commands via crafted FGFM packets.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-119303 MEDIUM 5.3
• CVE-2026-119035 MEDIUM 6.4
• CVE-2026-119034 MEDIUM 5.3
• CVE-2026-119032 MEDIUM 5.3
• CVE-2026-118439 MEDIUM 4.1
• CVE-2026-118420 MEDIUM 6.8
• CVE-2026-118418 MEDIUM 5.3
• CVE-2026-118041 HIGH 8.8
• CVE-2026-117523 MEDIUM 4.3
• CVE-2026-117522 MEDIUM 6.8

→ Open the live CVE board · all tools