---
id: "CVE-2026-126217"
page: "https://infrastack.ai/live/CVE-2026-126217"
kind: "vulnerability"
aliases: ["CVE-2026-126217"]
title: "Fortinet FortiAnalyzer and FortiManager: authenticated admins can escalate privileges"
severity: "high"
cvss: 8.7
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["fortianalyzer", "fortimanager", "fortinet", "self-hosted", "vendor"]
not_affected_if: ["no-admin-access-from-untrusted-users", "versions-outside-listed-ranges"]
published_at: "2026-11-11T22:17:19+00:00"
first_seen_at: "2026-11-11T22:29:30+00:00"
updated_at: "2026-11-11T22:31:24+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-126217", "first_seen_at": "2026-11-11T22:29:30+00:00"}]
exploit_sources: []
---

# Fortinet FortiAnalyzer and FortiManager: authenticated admins can escalate privileges

Link for people: https://infrastack.ai/live/CVE-2026-126217 (this .md is for agents)

Several Fortinet FortiAnalyzer and FortiManager versions have an incorrect authorization flaw in the web GUI. A logged-in administrator could escalate privileges, bypass authorization controls or impersonate internal services.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed version of FortiAnalyzer, FortiAnalyzer Cloud, FortiManager or FortiManager Cloud against the affected ranges listed in the advisory data
- Confirm whether the GUI is reachable by administrators you do not fully trust

## Fix

- Move to a fixed release; the sources do not name the fixed version numbers for each branch

## Timeline

- 2026-11-11T22:29:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-126217

## From the sources

A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated administrator to escalate their privileges, bypass authorization controls or impersonate internal services via specially crafted requests to the GUI.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_