Fortinet FortiAnalyzer and FortiManager: Authentication Bypass via Spoofing (CVE-2026-126184)
An authentication bypass by spoofing vulnerability in various versions of Fortinet FortiAnalyzer and FortiManager may allow an attacker to disrupt the HA state.
CVE search metadata
CVE search record: CVE-2026-126184. Severity: high. CVSS: 8.2. KEV: no. Product: FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, FortiManager Cloud. Brief: Fortinet FortiAnalyzer and FortiManager: Authentication Bypass via Spoofing (CVE-2026-126184). Brief link: https://feed.craftedsignal.io/briefs/2026-11-fortinet-fortianalyzer-fortimanager-auth-bypass-cve-2026-126184/
Triage facts
Revision 1- Applicability
- FortiAnalyzer, FortiAnalyzer Cloud +2
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 12, 02:10 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
CVE-2026-126184 is an authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer and FortiManager. This issue may allow an attacker to disrupt the High Availability (HA) state of the affected products.
Impact
Successful exploitation may result in the disruption of the HA state.