An improper authorization vulnerability exists in Fortinet FortiManager versions 8.0.0, 7.6.0 through 7.6.7, 7.4.0 through 7.4.5, and 7.2.0 through 7.2.8. This flaw may allow an unauthenticated attacker with network access to the FGFM port to execute arbitrary code or commands via specially crafted FGFM packets. The vulnerability has a critical severity with a CVSS score of 9.8.