| CVE-2026-126165 | HIGH | 7.5 | A memory allocation with excessive size value vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMa… | 2026-11-11 |
| CVE-2026-126166 | HIGH | 7.2 | A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet… | 2026-11-11 |
| CVE-2026-126167 | HIGH | 7.2 | A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortine… | 2026-11-11 |
| CVE-2026-126168 | HIGH | 7.2 | A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet… | 2026-11-11 |
| CVE-2026-126169 | HIGH | 7.2 | A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet… | 2026-11-11 |
| CVE-2026-126170 | CRITICAL | 9.8 | A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAn… | 2026-11-11 |
| CVE-2026-126171 | HIGH | 7.2 | A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, Fort… | 2026-11-11 |
| CVE-2026-126175 | HIGH | 8.8 | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortin… | 2026-11-11 |
| CVE-2026-126176 | HIGH | 8.1 | A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0… | 2026-11-11 |
| CVE-2026-126177 | HIGH | 8.1 | A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0… | 2026-11-11 |
| CVE-2026-126178 | HIGH | 7.2 | A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 … | 2026-11-11 |
| CVE-2026-126179 | HIGH | 7.2 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in … | 2026-11-11 |
| CVE-2026-126180 | HIGH | 8.4 | A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiManager… | 2026-11-11 |
| CVE-2026-126181 | HIGH | 8.0 | A use of hard-coded credentials vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0… | 2026-11-11 |
| CVE-2026-126182 | HIGH | 7.2 | A improper control of generation of code ('code injection') vulnerability in Fortinet FortiManager 8.0.0 throu… | 2026-11-11 |
| CVE-2026-126183 | HIGH | 8.7 | A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1,… | 2026-11-11 |
| CVE-2026-126184 | HIGH | 8.2 | A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer… | 2026-11-11 |
| CVE-2026-126185 | HIGH | 7.2 | A improper control of generation of code ('code injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 thro… | 2026-11-11 |
| CVE-2026-126211 | HIGH | 7.2 | A improper privilege management vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6… | 2026-11-11 |
| CVE-2026-126212 | HIGH | 7.2 | A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 … | 2026-11-11 |
| CVE-2026-126213 | HIGH | 7.1 | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortin… | 2026-11-11 |
| CVE-2026-126214 | HIGH | 7.2 | A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer… | 2026-11-11 |
| CVE-2026-126215 | HIGH | 8.2 | A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 thr… | 2026-11-11 |
| CVE-2026-126216 | LOW | 3.8 | A improper privilege management vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7… | 2026-11-11 |
| CVE-2026-126217 | HIGH | 8.7 | A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 thr… | 2026-11-11 |
| CVE-2026-126218 | HIGH | 8.2 | A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1,… | 2026-11-11 |
| CVE-2026-126219 | HIGH | 7.2 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet For… | 2026-11-11 |
| CVE-2026-126220 | HIGH | 7.2 | A improper neutralization of special elements in output used by a downstream component ('injection') vulnerabi… | 2026-11-11 |
| CVE-2026-126221 | HIGH | 7.2 | A improper neutralization of special elements in output used by a downstream component ('injection') vulnerabi… | 2026-11-11 |
| CVE-2026-126222 | HIGH | 7.2 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet For… | 2026-11-11 |
| CVE-2026-126223 | HIGH | 7.2 | A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0… | 2026-11-11 |
| CVE-2026-126224 | HIGH | 7.2 | A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet… | 2026-11-11 |
| CVE-2026-126225 | HIGH | 7.1 | A missing authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.7, Fort… | 2026-11-11 |
| CVE-2026-126226 | HIGH | 7.2 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in … | 2026-11-11 |
| CVE-2026-126227 | HIGH | 7.2 | A unintended proxy or intermediary ('confused deputy') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8… | 2026-11-11 |
| CVE-2026-126228 | HIGH | 7.2 | A out-of-bounds write vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through… | 2026-11-11 |
| CVE-2026-126229 | CRITICAL | 9.1 | A authorization bypass through user-controlled key vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1… | 2026-11-11 |
| CVE-2026-126230 | HIGH | 7.2 | A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, Fort… | 2026-11-11 |
| CVE-2026-126231 | HIGH | 7.2 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in … | 2026-11-11 |
| CVE-2026-126232 | HIGH | 7.5 | A improper certificate validation vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7… | 2026-11-11 |
| CVE-2026-126233 | HIGH | 7.2 | A unrestricted upload of file with dangerous type vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1,… | 2026-11-11 |
| CVE-2026-126234 | HIGH | 7.2 | A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiAnalyze… | 2026-11-11 |
| CVE-2026-126235 | HIGH | 7.2 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet For… | 2026-11-11 |
| CVE-2026-126236 | HIGH | 7.2 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in … | 2026-11-11 |
| CVE-2026-126237 | HIGH | 7.5 | A loop with unreachable exit condition ('infinite loop') vulnerability in Fortinet FortiAuthenticator 8.0.0 th… | 2026-11-11 |
| CVE-2026-126238 | HIGH | 8.6 | A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator… | 2026-11-11 |
| CVE-2026-126239 | HIGH | 7.5 | A stack-based buffer overflow vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthentic… | 2026-11-11 |
| CVE-2026-126240 | HIGH | 8.2 | A improper neutralization of special elements used in an ldap query ('ldap injection') vulnerability in Fortin… | 2026-11-11 |
| CVE-2026-126241 | HIGH | 8.8 | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortin… | 2026-11-11 |
| CVE-2026-126242 | HIGH | 7.4 | A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator… | 2026-11-11 |