FORTIANALYZER · CVE-2026-126211 · Vendor
FIX → 8.0.2 · 7.6.8 ✓ verified
FortiAnalyzer and FortiManager, Fortinet's log and central management appliances, contain an improper privilege management flaw in their JSON-RPC API. An authenticated attacker with privileged access can craft a request to elevate their own privileges.
first public Nov 11, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams running FortiAnalyzer or FortiManager (including the Cloud variants) on 8.0.0-8.0.1 or 7.6.1-7.6.7 (Cloud 7.6.1-7.6.8) are exposed. An attacker must already have an authenticated privileged account and send a crafted JSON-RPC request to raise privileges. Teams on 7.4 or 7.2, or not using these products, can skip it.
Not affected if fixed-version, no-privileged-accounts-exposed, unaffected-versions, version-7.2, version-7.4
Who cares fortianalyzer, fortimanager, fortinet, json-rpc, self-hosted
A improper privilege management vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.1 through 7.6.7, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.1 through 7.6.8, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.1 through 7.6.7, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.1 through 7.6.8 may allow an authenticated privileged attacker to elevate their privileges via crafted JSON-RPC request.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
get system status on the FortiAnalyzer/FortiManager CLI (or check the GUI dashboard) for the version8.0.0-8.0.1, 7.6.1-7.6.7 (Cloud 7.6.1-7.6.8, Cloud 8.0.0-8.0.1). 7.4 and 7.2 are not affectedUpgrade to 8.0.2 · 7.6.8
8.0.2 or above; 7.6.x to 7.6.8 or above8.0.2 or above; Cloud 7.6 (7.6.1-7.6.8): migrate to a fixed release. 7.4 and 7.2 are not affected