---
id: "CVE-2026-126219"
page: "https://infrastack.ai/live/CVE-2026-126219"
kind: "vulnerability"
aliases: ["CVE-2026-126219"]
title: "Fortinet FortiAnalyzer and FortiManager: admin path traversal reads or writes files"
severity: "high"
cvss: 7.2
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "FortiManager", "fixed": ["8.0.1", "7.6.8", "7.4.12"], "affected": "8.0.0; >= 7.6.0, <= 7.6.7; >= 7.4.0, <= 7.4.11", "ecosystem": "vendor"}, {"name": "FortiAnalyzer", "fixed": ["8.0.1", "7.6.8", "7.4.12"], "affected": "8.0.0; >= 7.6.0, <= 7.6.7; >= 7.4.0, <= 7.4.11", "ecosystem": "vendor"}, {"name": "FortiManager Cloud", "fixed": ["8.0.1", "7.6.8", "7.4.12"], "affected": "8.0.0; >= 7.6.0, <= 7.6.7; >= 7.4.1, <= 7.4.11", "ecosystem": "vendor"}, {"name": "FortiAnalyzer Cloud", "fixed": ["8.0.1", "7.6.8", "7.4.12"], "affected": "8.0.0; >= 7.6.0, <= 7.6.7; >= 7.4.1, <= 7.4.11", "ecosystem": "vendor"}]
ecosystems: []
tags: ["fortianalyzer", "fortimanager", "fortinet", "network-security", "self-hosted", "vendor"]
not_affected_if: ["gui-not-exposed", "version-7.2", "versions-outside-range"]
published_at: "2026-11-11T22:17:19+00:00"
first_seen_at: "2026-11-11T22:29:30+00:00"
updated_at: "2026-11-11T22:42:00+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-126219", "first_seen_at": "2026-11-11T22:29:30+00:00"}, {"source": "analyst", "url": "https://www.fortiguard.com/psirt/FG-IR-26-236", "first_seen_at": "2026-11-11T22:42:00+00:00", "cites": ["https://www.fortiguard.com/psirt/FG-IR-26-236"]}]
exploit_sources: []
---

# Fortinet FortiAnalyzer and FortiManager: admin path traversal reads or writes files

Link for people: https://infrastack.ai/live/CVE-2026-126219 (this .md is for agents)

A path traversal flaw in Fortinet FortiAnalyzer and FortiManager lets a logged-in administrator read or write arbitrary files and possibly run unauthorized code through crafted GUI requests. The sources list affected versions across the 7.4, 7.6 and 8.0 branches, including the cloud editions.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:FortiManager affected 8.0.0; >= 7.6.0, <= 7.6.7; >= 7.4.0, <= 7.4.11 fixed 8.0.1, 7.6.8, 7.4.12
- vendor:FortiAnalyzer affected 8.0.0; >= 7.6.0, <= 7.6.7; >= 7.4.0, <= 7.4.11 fixed 8.0.1, 7.6.8, 7.4.12
- vendor:FortiManager Cloud affected 8.0.0; >= 7.6.0, <= 7.6.7; >= 7.4.1, <= 7.4.11 fixed 8.0.1, 7.6.8, 7.4.12
- vendor:FortiAnalyzer Cloud affected 8.0.0; >= 7.6.0, <= 7.6.7; >= 7.4.1, <= 7.4.11 fixed 8.0.1, 7.6.8, 7.4.12

## How to check

Read the running version of FortiAnalyzer, FortiManager or their Cloud editions (GUI dashboard or CLI 'get system status'). Exposed if it is 8.0.0, 7.6.0-7.6.7, or 7.4.0-7.4.11 (Cloud 7.4 from 7.4.1). 7.2 is not affected. Then list administrator accounts and limit GUI access to trusted networks.

## Fix

Upgrade FortiAnalyzer / FortiManager (and their Cloud editions) to 8.0.1 or above on 8.0, 7.6.8 or above on 7.6, 7.4.12 or above on 7.4. The 7.2 branch is not affected. No workaround is listed in the advisory.

## Timeline

- 2026-11-11T22:29:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-126219
- 2026-11-11T22:42:00+00:00 analyst https://www.fortiguard.com/psirt/FG-IR-26-236 — Fortinet PSIRT FG-IR-26-236 (shared with CVE-2026-126220 and -126221) gives affected ranges and fixed versions; not exploited per vendor; no workaround or virtual patch listed. Admin-authenticated, CVSS 7.2. Found internally by Fortinet with an AI model.

## Documents

- [advisory] Fortinet PSIRT FG-IR-26-236: Improper limitation of a pathname to a restricted directory https://www.fortiguard.com/psirt/FG-IR-26-236

## From the sources

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager Cloud 8.0.0, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11 may allow an authenticated administrator to read or write arbitrary files or execute unauthorized code or commands via specially crafted requests to the GUI.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_