Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
8.2 HIGH
CVE-2026-126215 — Fortinet FortiAnalyzer and FortiManager Improper Authorization Vulnerability

A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, Forti…

Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.2 HIGH
CVE-2026-126240 — Fortinet FortiAuthenticator LDAP Injection Authentication Bypass

A improper neutralization of special elements used in an ldap query ('ldap injection') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may al…

fortiauthenticator | Remote | Injection
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.7 HIGH
CVE-2026-126217 — Fortinet FortiAnalyzer and FortiManager Improper Authorization Vulnerability

A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, Forti…

Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.6 HIGH
CVE-2026-126238 — Fortinet FortiAuthenticator Incorrect Authorization Vulnerability

A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to bypass authorization check…

fortiauthenticator | Remote | Authorization
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.1 HIGH
CVE-2026-126225 — Fortinet FortiAnalyzer and FortiManager Privilege Escalation Vulnerability

A missing authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.7, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.7, FortiManager 8.0.0 throug…

Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.2 HIGH
CVE-2026-126227 — Fortinet FortiAnalyzer and FortiManager Confused Deputy Vulnerability

A unintended proxy or intermediary ('confused deputy') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyze…

Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.2 HIGH
CVE-2026-126220 — Fortinet FortiManager Injection Vulnerability

A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0…

fortimanager fortimanager fortimanager | Remote | Injection
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.2 HIGH
CVE-2026-126219 — Fortinet FortiAnalyzer and FortiManager Path Traversal Vulnerability

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, …

Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.2 HIGH
CVE-2026-126235 — Fortinet FortiAnalyzer and FortiManager Path Traversal Vulnerability

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.2 through 7.6.7, FortiAnalyzer 7.4.7 th…

Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.2 HIGH
CVE-2026-126221 — Fortinet FortiAnalyzer and FortiManager Injection Vulnerability

A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.…

Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.5 HIGH
CVE-2026-126237 — Fortinet FortiAuthenticator Infinite Loop Denial of Service

A loop with unreachable exit condition ('infinite loop') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to cause a den…

fortiauthenticator | Remote | Denial of Service
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.2 HIGH
CVE-2026-126234 — Fortinet FortiAnalyzer and FortiManager Template Engine Server-Side Template Injection

A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer Cloud 8.0.0, FortiManager 8.0.0, FortiManager Cloud 8.0.0 may allo…

Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.2 HIGH
CVE-2026-126243 — Fortinet FortiAuthenticator Authentication Bypass Vulnerability

A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to bypass authentication and gain unauthorize…

fortiauthenticator | Remote | Authorization
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.2 HIGH
CVE-2026-126233 — Fortinet FortiAnalyzer and FortiManager Unrestricted File Upload Vulnerability

A unrestricted upload of file with dangerous type vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2…

Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.4 HIGH
CVE-2026-126242 — Fortinet FortiAuthenticator Authentication Bypass Vulnerability

A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to bypass authentication and gain unauthorize…

fortiauthenticator | Remote | Authorization
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.2 HIGH
CVE-2026-126222 — Fortinet FortiAnalyzer and FortiManager Path Traversal Vulnerability

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.3 through 7.6.7, FortiAnalyzer Cloud 8.…

Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.2 HIGH
CVE-2026-126211 — Fortinet FortiAnalyzer and FortiManager Improper Privilege Management Vulnerability

A improper privilege management vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.1 through 7.6.7, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.1 thro…

Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.1 HIGH
CVE-2026-126213 — Fortinet FortiAnalyzer and FortiManager SQL Injection Vulnerability

A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.…

Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.2 HIGH
CVE-2026-126218 — Fortinet FortiManager Authorization Bypass Privilege Escalation

A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11 may allow a remote a…

fortimanager fortimanager fortimanager | Remote | Authorization
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.2 HIGH
CVE-2026-126185 — Fortinet FortiAnalyzer and FortiManager Code Injection Vulnerability

A improper control of generation of code ('code injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAn…

Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
Showing 20 of 18902 Results