CVE-2026-126220
HIGH
NVD
CVSS Score
7.2
Severity
HIGH
Published
Nov 11, 2026
Vendor
unknown
Description
A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11 may allow an authenticated administrator to read or write arbitrary files or execute unauthorized code or commands via specially crafted requests to the GUI.