Fortinet FortiAnalyzer and FortiManager Buffer Overflow (CVE-2026-126223)
An authenticated administrator can exploit a stack-based buffer overflow in Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud via specially crafted JSON-RPC requests, resulting in potential unauthorized command execution or denial of service.
CVE search metadata
CVE search record: CVE-2026-126223. Severity: high. CVSS: 7.2. KEV: no. Product: FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, FortiManager Cloud. Brief: Fortinet FortiAnalyzer and FortiManager Buffer Overflow (CVE-2026-126223). Brief link: https://feed.craftedsignal.io/briefs/2026-11-fortinet-fortianalyzer-fortimanager-buffer-overflow-cve-2026-126223/
Triage facts
Revision 1- Applicability
- FortiAnalyzer, FortiAnalyzer Cloud +2
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 12, 00:23 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
CVE-2026-126223 is a stack-based buffer overflow vulnerability affecting specific versions of Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud. The vulnerability allows an authenticated administrator to execute unauthorized code or commands or cause a denial of service by sending specially crafted JSON-RPC requests. The vulnerability has a CVSS v3.1 base score of 7.2.
Impact
Successful exploitation allows an authenticated administrator to execute unauthorized code or commands or cause a denial of service on the affected devices.
Recommendation
Review the vendor security advisory and apply the recommended updates or mitigations provided by Fortinet for the affected versions.