---
id: "CVE-2026-126262"
page: "https://infrastack.ai/live/CVE-2026-126262"
kind: "vulnerability"
aliases: ["CVE-2026-126262"]
title: "Fortinet FortiAnalyzer and FortiManager: SQL injection lets unauthenticated attackers run commands"
severity: "critical"
cvss: 9.8
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["fortianalyzer", "fortimanager", "fortinet", "self-hosted", "vendor"]
not_affected_if: ["oftp-port-not-reachable", "other-versions"]
published_at: "2026-11-11T22:17:26+00:00"
first_seen_at: "2026-11-11T22:29:33+00:00"
updated_at: "2026-11-11T22:30:57+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-126262", "first_seen_at": "2026-11-11T22:29:33+00:00"}]
exploit_sources: []
---

# Fortinet FortiAnalyzer and FortiManager: SQL injection lets unauthenticated attackers run commands

Link for people: https://infrastack.ai/live/CVE-2026-126262 (this .md is for agents)

FortiAnalyzer and FortiManager have an SQL injection flaw in their OFTP port handling of crafted packets. An unauthenticated attacker with access to that port may execute code or commands on the system.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed version of FortiAnalyzer or FortiManager against the affected ranges listed in the description.
- Check whether the OFTP port is reachable from untrusted networks.

## Fix

- Move FortiAnalyzer 8.0 to a release after `8.0.1`, FortiAnalyzer 7.6 after `7.6.7`, FortiAnalyzer 7.4 after `7.4.11`, and FortiAnalyzer 7.2 after `7.2.12`.
- Move FortiManager 8.0 to a release after `8.0.0`, FortiManager 7.6 after `7.6.7`, FortiManager 7.4 after `7.4.11`, and FortiManager 7.2 after `7.2.12`.

## Timeline

- 2026-11-11T22:29:33+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-126262

## From the sources

A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12 may allow an unauthenticated attacker who has access to the oftp port to execute code or command on the system via crafted OFTP packets.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_