---
id: "CVE-2026-126183"
page: "https://infrastack.ai/live/CVE-2026-126183"
kind: "vulnerability"
aliases: ["CVE-2026-126183"]
title: "Fortinet FortiManager: authenticated users can run commands outside their scope"
severity: "high"
cvss: 8.7
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "FortiManager", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["fortimanager", "fortinet", "infrastructure", "self-hosted"]
not_affected_if: ["auth-required", "version-outside-range"]
published_at: "2026-11-11T22:17:17+00:00"
first_seen_at: "2026-11-11T22:29:30+00:00"
updated_at: "2026-11-11T22:31:26+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-126183", "first_seen_at": "2026-11-11T22:29:30+00:00"}]
exploit_sources: []
---

# Fortinet FortiManager: authenticated users can run commands outside their scope

Link for people: https://infrastack.ai/live/CVE-2026-126183 (this .md is for agents)

A crafted HTTP request to FortiManager lets a logged-in user bypass authorization and execute commands outside their expected scope. The sources describe the attacker as authenticated, so the risk is mainly to accounts that already have some access.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:FortiManager affected range not listed fixed no fixed version listed

## How to check

- Check the FortiManager version (for example in the GUI or with `get system status`) and compare it with the affected ranges: 8.0.0 through 8.0.1, 7.6.0 through 7.6.7, 7.4.0 through 7.4.11, 7.2.0 through 7.2.12, and the FortiManager Cloud equivalents.
- Review which accounts have login access to FortiManager.

## Fix

- Upgrade to a fixed release listed in the Fortinet advisory: unknown from the sources given.

## Timeline

- 2026-11-11T22:29:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-126183

## From the sources

A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated attacker to execute commands outside of the expected scope via specially crafted HTTP request.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_