---
id: "CVE-2026-121526"
page: "https://infrastack.ai/live/CVE-2026-121526"
kind: "vulnerability"
aliases: ["CVE-2026-121526"]
title: "Fortinet FortiAuthenticator: open redirect lets attackers send users to malicious sites"
severity: "medium"
cvss: 6.1
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["fortiauthenticator", "fortinet", "infrastructure", "self-hosted"]
not_affected_if: ["unknown"]
published_at: "2026-11-11T22:17:10+00:00"
first_seen_at: "2026-11-11T22:29:27+00:00"
updated_at: "2026-11-11T22:34:04+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-121526", "first_seen_at": "2026-11-11T22:29:27+00:00"}]
exploit_sources: []
---

# Fortinet FortiAuthenticator: open redirect lets attackers send users to malicious sites

Link for people: https://infrastack.ai/live/CVE-2026-121526 (this .md is for agents)

FortiAuthenticator 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10 can be tricked into redirecting users to an attacker-chosen site via crafted HTTP requests. An unauthenticated attacker can use this for phishing or credential theft against users who follow the redirect.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed FortiAuthenticator version in the admin interface; versions `8.0.0` through `8.0.3` and `6.6.0` through `6.6.10` are listed as affected.

## Fix

- Move to a fixed FortiAuthenticator release; the sources do not name the fixed version.

## Timeline

- 2026-11-11T22:29:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-121526

## From the sources

A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to perform an open redirect attack via crafted HTTP requests.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_