← Database

CVE-2026-126257

CRITICAL CVSS: 9.0 Published: 2026-11-11 Modified: 2026-11-11

Description

A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to bypass credential validation in certain circumstances outside of the attacker's control and gain unauthorized access.

Affected Platforms

Unknown

Weakness Type

CWE-259

References