CVE-2026-126247
HIGH
NVD
CVSS Score
7.2
Severity
HIGH
Published
Nov 11, 2026
Vendor
unknown
Description
A use of externally-controlled format string vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an authenticated privileged attacker to execute unauthorized code or commands via http requests.