FortiAnalyzer 7.4.0 Through 7.4.11 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/fortianalyzer-7.4.0-through-7.4.11/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 12 Nov 2026 00:22:05 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgFortinet FortiAnalyzer and FortiManager: Path traversal vulnerability (CVE-2026-126219)https://feed.craftedsignal.io/briefs/2026-11-cve-2026-126219/Thu, 12 Nov 2026 00:22:05 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-cve-2026-126219/CVE-2026-126219 is a path traversal vulnerability in Fortinet FortiAnalyzer and FortiManager that allows an authenticated administrator to read or write arbitrary files or execute unauthorized code or commands via specially crafted GUI requests.CVE-2026-126219 is an improper limitation of a pathname to a restricted directory (path traversal) vulnerability affecting multiple versions of Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud. An authenticated administrator may leverage this vulnerability to read or write arbitrary files or execute unauthorized code or commands via specially crafted requests to the GUI.

Impact

Successful exploitation allows an authenticated administrator to interact with the underlying filesystem and execute unauthorized commands or code. The CVSS v3.1 Base Score is 7.2.

]]>highadvisory