{"id":"CVE-2026-126246","kind":"vulnerability","aliases":["CVE-2026-126246"],"related":[],"title":"Fortinet FortiAuthenticator: null pointer flaw lets unauthenticated HTTP requests crash service","description":"A null pointer dereference vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to perform a denial of service attack via http requests.","summary":"A null pointer dereference in FortiAuthenticator 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10 can be triggered by HTTP requests. An unauthenticated attacker can cause a denial of service.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["fortiauthenticator","fortinet","self-hosted","vendor"],"not_affected_if":["unaffected-version"],"how_to_check":"- Check the FortiAuthenticator firmware version in the admin interface against the affected ranges: `8.0.0` through `8.0.3` and `6.6.0` through `6.6.10`","fix":"- Move to a version outside the affected ranges; the sources do not name the fixed release","status":"open","published_at":"2026-11-11T22:17:24+00:00","first_seen_at":"2026-11-11T22:29:32+00:00","triaged_at":"2026-11-11T22:31:59+00:00","updated_at":"2026-11-11T22:31:59+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-11-11T22:31:59Z","model":"claude-haiku-5-5","output":{"fix":"- Move to a version outside the affected ranges; the sources do not name the fixed release\n- unknown","reach":"network","title":"Fortinet FortiAuthenticator: null pointer flaw lets unauthenticated HTTP requests crash service","impact":"low","summary":"A null pointer dereference in FortiAuthenticator 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10 can be triggered by HTTP requests. An unauthenticated attacker can cause a denial of service.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["fortiauthenticator","fortinet","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"Remote attacker crashes the appliance with crafted HTTP requests","analyst_note":"Confirm the fixed FortiAuthenticator release and the Fortinet PSIRT advisory for CVE-2026-126246; the NVD entry gives no fix.","how_to_check":"- Check the FortiAuthenticator firmware version in the admin interface against the affected ranges: `8.0.0` through `8.0.3` and `6.6.0` through `6.6.10`\n- unknown for anything else; the sources do not say","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["unaffected-version"],"who_is_affected":"FortiAuthenticator appliances on the affected 8.0.x and 6.6.x firmware ranges that accept HTTP requests are exposed. The sources do not describe a configuration that limits exposure, and they do not say whether authentication blocks the request path. Teams running other Fortinet products or versions outside those ranges can skip it.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00077,"input_tokens":4563,"output_tokens":628,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-126246':14A,17A '-2026':13A,16A '6.6.0':34B,64C '6.6.10':36B,66C '8.0.0':30B,60C '8.0.3':32B,62C 'allow':68C 'attack':45B,71C,78C 'caus':47B 'crash':10A 'cve':12A,15A 'denial':49B,75C 'derefer':27B,55C 'flaw':5A 'fortiauthent':2A,18B,29B,59C,63C 'fortinet':1A,19B,58C 'host':22B 'http':8A,41B,80C 'let':6A 'may':67C 'null':3A,25B,53C 'perform':73C 'pointer':4A,26B,54C 'request':9A,42B,81C 'self':21B 'self-host':20B 'servic':11A,51B,77C 'trigger':39B 'unauthent':7A,44B,70C 'vendor':23B 'via':79C 'vulner':56C","nicknames":[],"mitigations":[],"who_affected":"FortiAuthenticator appliances on the affected 8.0.x and 6.6.x firmware ranges that accept HTTP requests are exposed. The sources do not describe a configuration that limits exposure, and they do not say whether authentication blocks the request path. Teams running other Fortinet products or versions outside those ranges can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["fortiauthenticator","fortinet","high","selfhosted","vendor"],"campaign_type":null,"search_a":"'-126246':14A,17A '-2026':13A,16A 'crash':10A 'cve':12A,15A 'flaw':5A 'fortiauthent':2A 'fortinet':1A 'http':8A 'let':6A 'null':3A 'pointer':4A 'request':9A 'servic':11A 'unauthent':7A","search_b":"'6.6.0':34B '6.6.10':36B '8.0.0':30B '8.0.3':32B 'attack':45B 'caus':47B 'denial':49B 'derefer':27B 'fortiauthent':18B,29B 'fortinet':19B 'host':22B 'http':41B 'null':25B 'pointer':26B 'request':42B 'self':21B 'self-host':20B 'servic':51B 'trigger':39B 'unauthent':44B 'vendor':23B","search_c":"'6.6.0':64C '6.6.10':66C '8.0.0':60C '8.0.3':62C 'allow':68C 'attack':71C,78C 'denial':75C 'derefer':55C 'fortiauthent':59C,63C 'fortinet':58C 'http':80C 'may':67C 'null':53C 'perform':73C 'pointer':54C 'request':81C 'servic':77C 'unauthent':70C 'via':79C 'vulner':56C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-11T22:17:24+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"psirt@fortinet.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-126246","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126246","severity":null,"published_at":"2026-11-11T22:17:24+00:00","modified_at":"2026-11-11T22:17:24+00:00","first_seen_at":"2026-11-11T22:29:32+00:00","fetched_at":"2026-11-11T22:29:32+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}