#fortianalyzer
4 articles
CVE-2026-126170: Code Execution in Fortinet FortiAnalyzer and FortiManager
An output escaping flaw in FortiAnalyzer and FortiManager 7.6–8.0 (including Cloud and BigData) lets an unauthenticated attacker execute code via an HTTP request...
CVE-2026-126229: VDOM Authorization Bypass in FortiAnalyzer and FortiManager
An authorization bypass in FortiAnalyzer and FortiManager 7.2–8.0 (including Cloud) lets an authenticated administrator access other VDOMs via crafted HTTP requests...
CVE-2026-126262: SQL Injection in Fortinet FortiAnalyzer and FortiManager
An SQL injection in FortiAnalyzer and FortiManager 7.2–8.0 lets an unauthenticated attacker with access to the OFTP port execute code or commands on the system...
Critical Vulnerabilities in Fortinet Products – FortiSandbox, FortiDDoS-F, and FortiAnalyzer Cloud (April 2026)
Fortinet has published PSIRT advisories for four vulnerabilities across its products. Two critical flaws in FortiSandbox allow unauthenticated attackers to achieve remote code execution and authentication bypass with privilege escalation...