An improper privilege management vulnerability exists in Fortinet FortiAnalyzer and FortiManager products, including their Cloud versions, across multiple 7.6.x and 8.0.x releases. This flaw allows an authenticated attacker with privileged access to elevate their privileges further by sending a crafted JSON-RPC request. The vulnerability has a high severity rating with a CVSS score of 7.2, indicating significant potential impact on confidentiality, integrity, and availability.