FORTIANALYZER · CVE-2026-126235 · Vendor
FIX → 8.0.2 · 7.6.8 +2 ✓ verified
A path traversal flaw in Fortinet FortiAnalyzer and FortiManager lets an authenticated administrator write files outside the intended directory using a specially crafted archive. The sources describe arbitrary file writes, which can lead to code execution on the appliance, but do not state that.
first public Nov 11, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Teams running self-managed FortiAnalyzer or FortiManager (or the Cloud editions) in the listed version ranges. The attacker needs an authenticated administrator account and uploads a specially crafted archive to write arbitrary files; Fortinet lists the impact as unauthorized code or command execution. Versions at or above the fixed releases, or setups with no untrusted admin access, can skip it.
Not affected if auth-required, fixed-version, no-admin-access-exposed, unaffected-version
Who cares auth-required, fortianalyzer, fortimanager, fortinet, self-hosted
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.2 through 7.6.7, FortiAnalyzer 7.4.7 through 7.4.11, FortiAnalyzer 7.2.10 through 7.2.12, FortiAnalyzer Cloud 8.0.0 through 8.0.1, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.2 through 7.6.7, FortiManager 7.4.7 through 7.4.11, FortiManager 7.2.10 through 7.2.12, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an authenticated administrator to write arbitrary files via a specially crafted archive.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
get system status)8.0.0-8.0.1, 7.6.2-7.6.7, 7.4.7-7.4.11, 7.2.10-7.2.12; Cloud editions 8.0.0-8.0.1, 7.6.0-7.6.7, 7.4.1-7.4.11, 7.2.1-7.2.12Upgrade to 8.0.2 · 7.6.8 +2
Upgrade to 8.0.2, 7.6.8, 7.4.12 or 7.2.13 (or above) for FortiAnalyzer, FortiManager and their Cloud editions; no virtual patch or workaround listed.