Fortinet FortiAnalyzer and FortiManager SQL Injection Vulnerability (CVE-2026-126175)
An SQL injection vulnerability in Fortinet FortiAnalyzer and FortiManager allows an authenticated attacker to execute unauthorized code or commands via crafted JSON-RPC requests.
CVE search metadata
CVE search record: CVE-2026-126175. Severity: high. CVSS: 8.8. KEV: no. Product: FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, FortiManager Cloud. Brief: Fortinet FortiAnalyzer and FortiManager SQL Injection Vulnerability (CVE-2026-126175). Brief link: https://feed.craftedsignal.io/briefs/2026-11-fortinet-sql-injection-cve-2026-126175/
Triage facts
Revision 1- Applicability
- FortiAnalyzer, FortiAnalyzer Cloud +2
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 12, 00:16 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
CVE-2026-126175 is an SQL injection vulnerability affecting various versions of Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud. The flaw occurs due to improper neutralization of special elements in SQL commands and can be exploited by an authenticated attacker sending crafted JSON-RPC requests to the target system.
Impact
Successful exploitation may allow an authenticated attacker to execute unauthorized code or commands on the affected appliance.
Recommendation
Refer to the official Fortinet security advisory for guidance on affected versions and mitigation steps.