Threats affecting pkg:rpm/fortinet/fortiauthenticator

CVE-2026-126242 is an improper access control vulnerability in Fortinet FortiAuthenticator versions 6.6.0 through 6.6.10 and 8.0.0 through 8.0.3. This flaw may allow an attacker to bypass authentication and gain unauthorized access. However, full impersonation requires the attacker to have obtained certain IDs and data through other means. The vulnerability has a high severity rating with a CVSS score of 7.4. An official fix is available from Fortinet.