Threats tagged 'ghsa-5qjj-vgfv-g6hm'

A missing authorization vulnerability exists in Fortinet FortiAnalyzer and FortiManager products including certain cloud versions. This flaw affects FortiAnalyzer versions 8.0.0 through 8.0.1 and 7.6.7, FortiAnalyzer Cloud versions 8.0.0 through 8.0.1 and 7.6.7, FortiManager versions 8.0.0 through 8.0.1 and 7.6.7, and FortiManager Cloud versions 8.0.0 through 8.0.1 and 7.6.7. An authenticated attacker may exploit this vulnerability by sending a crafted JSON-RPC request to elevate their privileges. The vulnerability is tracked as CVE-2026-126225 and has a CVSS v3.1 base score of 7.1, indicating high severity.