---
id: "CVE-2026-126234"
page: "https://infrastack.ai/live/CVE-2026-126234"
kind: "vulnerability"
aliases: ["CVE-2026-126234"]
title: "Fortinet FortiAnalyzer and FortiManager: template injection lets a restricted user run commands"
severity: "high"
cvss: 7.2
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "FortiAnalyzer", "fixed": ["8.0.1"], "affected": "8.0.0", "ecosystem": "vendor"}, {"name": "FortiAnalyzer Cloud", "fixed": ["8.0.1"], "affected": "8.0.0", "ecosystem": "vendor"}, {"name": "FortiManager", "fixed": ["8.0.1"], "affected": "8.0.0", "ecosystem": "vendor"}, {"name": "FortiManager Cloud", "fixed": ["8.0.1"], "affected": "8.0.0", "ecosystem": "vendor"}]
ecosystems: []
tags: ["auth-required", "fortianalyzer", "fortimanager", "fortinet", "infrastructure", "self-hosted"]
not_affected_if: ["no-restricted-accounts", "patched-8.0.1", "version-7.x"]
published_at: "2026-11-11T22:17:22+00:00"
first_seen_at: "2026-11-11T22:29:32+00:00"
updated_at: "2026-11-11T22:38:56+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-126234", "first_seen_at": "2026-11-11T22:29:32+00:00"}, {"source": "analyst", "url": "https://www.fortiguard.com/psirt/FG-IR-26-249", "first_seen_at": "2026-11-11T22:38:56+00:00", "cites": ["https://www.fortiguard.com/psirt/FG-IR-26-249"]}]
exploit_sources: []
---

# Fortinet FortiAnalyzer and FortiManager: template injection lets a restricted user run commands

Link for people: https://infrastack.ai/live/CVE-2026-126234 (this .md is for agents)

A template engine flaw in Fortinet FortiAnalyzer and FortiManager version 8.0.0 lets a logged-in user with restricted privileges send a crafted request that runs unauthorized code or commands. The sources give a CVSS score of 7.2 and do not say whether the flaw is exploited in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:FortiAnalyzer affected 8.0.0 fixed 8.0.1
- vendor:FortiAnalyzer Cloud affected 8.0.0 fixed 8.0.1
- vendor:FortiManager affected 8.0.0 fixed 8.0.1
- vendor:FortiManager Cloud affected 8.0.0 fixed 8.0.1

## How to check

Check the firmware version of FortiAnalyzer, FortiManager and their Cloud variants (GUI dashboard or CLI 'get system status'). Only 8.0.0 is affected; 7.2, 7.4 and 7.6 are not.

## Fix

Upgrade FortiAnalyzer, FortiAnalyzer Cloud, FortiManager and FortiManager Cloud 8.0.0 to 8.0.1 or above. 7.2, 7.4 and 7.6 are not affected.

## Timeline

- 2026-11-11T22:29:32+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-126234
- 2026-11-11T22:38:56+00:00 analyst https://www.fortiguard.com/psirt/FG-IR-26-249 — Read Fortinet FG-IR-26-249: only 8.0.0 affected, fix 8.0.1; no workaround listed, no virtual patch, Known Exploited: No.

## Documents

- [advisory] Fortinet FG-IR-26-249 https://www.fortiguard.com/psirt/FG-IR-26-249

## From the sources

A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer Cloud 8.0.0, FortiManager 8.0.0, FortiManager Cloud 8.0.0 may allow an authenticated attacker with restricted privileges to execute unauthorized code or commands via a specially crafted request.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_