Search threats, CVEs… ⌘K
Back to vendor advisories
Fortinet PSIRT AdvisoriesFG-IR-26-239

Improper neutralization of argument delimiters in a command

HighVendor CVSS 7.2 / 10 1 CVE Published Nov 10, 2026 at 8:00 AM UTC
Get alerts for FortiManager

Summary

CVSSv3 Score:

7.2

An Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')[CWE-88] vulnerability in FortiManager,FortiAnalyzer, FortiManager Cloud, FortiAnalyzer Cloud may allow an authenticated privileged admin user to execute unauthorized code or commands.

Revised on 2026-11-10 00:00:00

Products covered

  • FortiManager

  • FortiAnalyzer

  • FortiManager Cloud

  • FortiAnalyzer Cloud

Remediation

Separate remediation guidance was not included in the collected bulletin.

CVEs in this advisory 1

CVE-2026-126224

Updates

  1. Published by Fortinet

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

Keep investigating
See every advisory from this vendor