Search threats, CVEs… ⌘K
Back to vendor advisories
Fortinet PSIRT AdvisoriesFG-IR-26-231

Improper privilege management

HighVendor CVSS 7.2 / 10 1 CVE Published Nov 10, 2026 at 8:00 AM UTC
Get alerts for FortiAnalyzer

Summary

CVSSv3 Score:

7.2

An improper privilege management vulnerability [CWE-269] in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager and FortiManager Cloud may allow an authenticated privileged attacker to elevate their privileges via crafted JSON-RPC request.

Revised on 2026-11-10 00:00:00

Products covered

  • FortiAnalyzer

  • FortiAnalyzer Cloud

  • FortiManager

  • FortiManager Cloud

Remediation

Separate remediation guidance was not included in the collected bulletin.

CVEs in this advisory 1

CVE-2026-126211

Updates

  1. Published by Fortinet

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

Keep investigating
See every advisory from this vendor