CVE-2026-126257
CRITICAL
NVD
CVSS Score
9
Severity
CRITICAL
Published
Nov 11, 2026
Vendor
unknown
Description
A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to bypass credential validation in certain circumstances outside of the attacker's control and gain unauthorized access.