A path traversal vulnerability exists in Fortinet FortiAnalyzer and FortiManager products, including their cloud versions, across multiple 7.6.x and 8.0.x releases. This flaw allows an authenticated attacker with administrative privileges to execute unauthorized code or commands by sending crafted requests. The vulnerability affects versions FortiAnalyzer 7.6.3 through 7.6.7 and 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.3 through 7.6.7 and 8.0.0 through 8.0.1, FortiManager 7.6.3 through 7.6.7 and 8.0.0 through 8.0.1, and FortiManager Cloud 7.6.3 through 7.6.7 and 8.0.0 through 8.0.1. The CVSS v3.1 base score is 7.2, indicating a high severity vulnerability. No public exploits or patches are currently documented in the provided data.
An injection vulnerability exists in multiple versions of Fortinet FortiAnalyzer and FortiManager products, including their cloud variants. This flaw allows an authenticated administrator to read or write arbitrary files or execute unauthorized code or commands via specially crafted requests to the GUI. The vulnerability affects FortiAnalyzer versions 7.4.0 through 7.4.11, 7.6.0 through 7.6.7, and 8.0.0; FortiManager versions 7.4.0 through 7.4.11, 7.6.0 through 7.6.7, and 8.0.0; and their respective cloud versions. The CVSS v3.1 base score is 7.2, indicating a high severity impact. No public exploits or patches are currently documented in the provided data.
A heap-based buffer overflow vulnerability exists in multiple versions of Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud. This flaw may allow an authenticated administrator to execute unauthorized code or commands or cause a denial of service via specially crafted JSON-RPC requests.
An OS command injection vulnerability exists in multiple versions of Fortinet FortiAnalyzer and FortiManager products, including their cloud variants. This flaw allows an authenticated administrator to execute unauthorized code or commands via specially crafted requests. The vulnerability affects versions 7.2.x through 8.0.0 of these products. It has a high severity rating with a CVSS score of 7.2.
An improper privilege management vulnerability exists in Fortinet FortiAnalyzer and FortiManager products, including their Cloud versions, across multiple 7.6.x and 8.0.x releases. This flaw allows an authenticated attacker with privileged access to elevate their privileges further by sending a crafted JSON-RPC request. The vulnerability has a high severity rating with a CVSS score of 7.2, indicating significant potential impact on confidentiality, integrity, and availability.
An improper encoding or escaping of output vulnerability exists in multiple versions of Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiAnalyzer-BigData, FortiManager, and FortiManager Cloud. This flaw may allow an unauthenticated attacker to execute unauthorized code or commands via a specially crafted HTTP request. The vulnerability affects versions 7.6.0 through 7.6.7 and 8.0.0 through 8.0.2 of these products. It has a critical CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability.
Fortinet FortiMail versions 8.0.0 through 8.0.1 contain a use of externally-controlled format string vulnerability. This flaw may allow a remote unauthenticated attacker to execute unauthorized code or commands by sending a specially crafted SMTP command to the affected system.
An XML injection vulnerability, also known as blind XPath injection, exists in Fortinet FortiMail versions 7.6.0 through 7.6.6 and 8.0.0 through 8.0.1. This flaw may allow a remote unauthenticated attacker to execute unauthorized code or commands by sending a specially crafted request. The vulnerability has a high severity rating with a CVSS score of 8.7.
An XML injection vulnerability, also known as blind XPath injection, affects multiple versions of Fortinet FortiAnalyzer and FortiManager products including their cloud variants. This flaw allows an unauthenticated remote attacker to inject arbitrary content into a signed SAML response by sending crafted SAML requests. The vulnerability impacts versions 7.2.0 through 8.0.0 across these products. The CVSS score is 8.1, indicating a high severity issue with potential confidentiality, integrity, and availability impacts.
An improper control of code generation vulnerability (code injection) exists in Fortinet FortiAnalyzer and FortiManager products, including their cloud versions, across multiple 7.4.x, 7.6.x, and 8.0.x releases. This flaw allows an authenticated administrator to execute unauthorized code or commands via specially crafted requests.
An improper neutralization of special elements vulnerability exists in Fortinet FortiManager versions 7.2 all versions through 8.0.1 and corresponding FortiManager Cloud versions. This flaw may allow a low privileged Device Manager administrator to escalate privileges to super admin on managed FortiGate devices by injecting malicious commands.
CVE-2026-126167 is a command injection vulnerability in Fortinet FortiMail versions 7.2 all versions, 7.4.0 through 7.4.8, 7.6.0 through 7.6.6, and 8.0.0 through 8.0.2. It allows an authenticated remote attacker with domain admin or admin privileges to execute arbitrary commands as root, delete users of other tenant domains on a paired FortiAuthenticator, and read or write arbitrary files via crafted HTTP requests to the administrative interface.
CVE-2026-126169 is a vulnerability in Fortinet FortiMail versions 7.2 (all versions), 7.4.0 through 7.4.8, 7.6.0 through 7.6.6, and 8.0.0 through 8.0.2. It involves improper neutralization of argument delimiters in commands, allowing an authenticated remote attacker with domain admin or admin privileges to perform unauthorized actions on a paired FortiAuthenticator device. These actions include deleting users from other tenant domains, executing arbitrary code as root, running arbitrary CLI commands, and reading or writing arbitrary files via crafted HTTP requests to the administrative interface.
An SQL injection vulnerability exists in Fortinet FortiMail versions 7.2 (all versions), 7.4.0 through 7.4.8, 7.6.0 through 7.6.6, and 8.0.0 through 8.0.1. This flaw allows an unauthenticated attacker to execute unauthorized commands or code via specially crafted requests. The vulnerability has a critical severity with a CVSS score of 9.4, indicating high impact on confidentiality, integrity, and availability.
An uncontrolled resource consumption vulnerability exists in Fortinet FortiMail versions 7.4.0 through 7.4.6, 7.6.0 through 7.6.6, and 8.0.0 through 8.0.1. This flaw allows a remote unauthenticated attacker to cause a denial of service by sending repeated unauthenticated POST requests.
CVE-2026-126181 is a vulnerability in Fortinet FortiManager versions 7.2 (all versions), 7.4.0 through 7.4.11, 7.6.0 through 7.6.7, and 8.0.0 through 8.0.1. It involves the use of hard-coded credentials that may allow an adjacent-network authenticated attacker with user permission to join the FGFM configuration-sync mesh using the default pre-shared key.
An improper control of code generation vulnerability (code injection) exists in Fortinet FortiManager versions 7.2.0 through 7.2.12, 7.4.0 through 7.4.11, 7.6.0 through 7.6.7, and 8.0.0 through 8.0.1, including corresponding FortiManager Cloud versions. This flaw may allow a remote authenticated attacker to execute unauthorized code or commands via crafted HTTP requests.
CVE-2026-126183 is an authorization bypass vulnerability in Fortinet FortiManager versions 7.2.0 through 8.0.1 and corresponding FortiManager Cloud versions. It allows an authenticated attacker to execute commands beyond their expected permissions by sending specially crafted HTTP requests. The vulnerability affects multiple FortiManager and FortiManager Cloud releases across several major versions.
A format string vulnerability exists in Fortinet FortiAnalyzer and FortiManager products, including their cloud versions, across multiple 7.x and 8.x releases. This vulnerability allows an authenticated attacker to execute unauthorized commands via specially crafted HTTP requests. The flaw affects versions 7.2.0 through 7.2.12, 7.4.0 through 7.4.11, 7.6.0 through 7.6.7, and 8.0.0 through 8.0.1 for both FortiAnalyzer and FortiManager, including their cloud variants.
CVE-2026-126168 is a vulnerability in Fortinet FortiMail versions 7.2 all versions, 7.4.0 through 7.4.8, 7.6.0 through 7.6.6, and 8.0.0 through 8.0.2. It involves improper neutralization of argument delimiters in commands, allowing an authenticated attacker with domain admin or admin privileges to perform unauthorized actions such as deleting users on a paired FortiAuthenticator, executing arbitrary code as root, and reading or writing arbitrary files via crafted HTTP requests to the administrative interface.