Fortinet FortiAnalyzer and FortiManager: GUI Injection (CVE-2026-126221)
An injection vulnerability in Fortinet FortiAnalyzer and FortiManager allows an authenticated administrator to read or write arbitrary files and execute unauthorized code via specially crafted GUI requests.
CVE search metadata
CVE search record: CVE-2026-126221. Severity: high. CVSS: 7.2. KEV: no. Product: FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, FortiManager Cloud. Brief: Fortinet FortiAnalyzer and FortiManager: GUI Injection (CVE-2026-126221). Brief link: https://feed.craftedsignal.io/briefs/2026-11-fortinet-injection-cve-2026-126221/
Triage facts
Revision 1- Applicability
- FortiAnalyzer, FortiAnalyzer Cloud +2
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 12, 00:22 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
CVE-2026-126221 is an injection vulnerability affecting Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud. An authenticated administrator can leverage this vulnerability to execute unauthorized code or commands and perform unauthorized file read or write operations by sending specially crafted requests to the product's GUI.
Impact
Successful exploitation allows an authenticated administrator to read or write arbitrary files and execute unauthorized code or commands.
Recommendation
Review the vendor security advisory to determine if your specific version of Fortinet products is affected and follow the provided remediation guidance.