Authentication Bypass Vulnerability in Fortinet FortiAnalyzer and FortiManager
CVE-2026-126214

7.2HIGH

Key Information:

Vendor

Fortinet
Status
Fortimanager
Fortianalyzer
Fortianalyzer Cloud
Vendor
CVE Published:
11 November 2026

What is CVE-2026-126214?

A vulnerability exists in Fortinet FortiAnalyzer and FortiManager that allows an authenticated administrator to escalate privileges and bypass authorization controls. This occurs through the exploitation of specially crafted requests to the GUI, which can lead to an impersonation of internal services. Organizations using affected versions are encouraged to assess their security posture and implement necessary mitigations as detailed in Fortinet's security advisory.

Affected Version(s)

FortiAnalyzer 8.0.0 <= 8.0.1

FortiAnalyzer 7.6.0 <= 7.6.7

FortiAnalyzer 7.4.0 <= 7.4.11

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-234

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.