{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/fortianalyzer-8.0.0-through-8.0.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-126214"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FortiAnalyzer (8.0.0 through 8.0.1)","FortiAnalyzer (7.6.0 through 7.6.7)","FortiAnalyzer (7.4.0 through 7.4.11)","FortiAnalyzer (7.2.0 through 7.2.12)","FortiAnalyzer Cloud (8.0.0 through 8.0.1)","FortiAnalyzer Cloud (7.6.0 through 7.6.7)","FortiAnalyzer Cloud (7.4.1 through 7.4.11)","FortiAnalyzer Cloud (7.2.1 through 7.2.12)","FortiManager (8.0.0)","FortiManager (7.6.0 through 7.6.7)","FortiManager (7.4.0 through 7.4.11)","FortiManager (7.2.0 through 7.2.12)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Fortinet"],"content_html":"\u003cp\u003eCVE-2026-126214 is an authentication bypass by spoofing vulnerability affecting Fortinet FortiAnalyzer, FortiAnalyzer Cloud, and FortiManager. The issue enables an attacker who already possesses authenticated administrator access to leverage specially crafted requests against the administrative GUI to bypass authorization controls, escalate privileges, or impersonate internal services.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eExploitation may allow an authenticated attacker to gain unauthorized administrative privileges or interact with internal services as an authorized entity, potentially leading to full compromise of the affected device or managed infrastructure.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all instances of FortiAnalyzer, FortiAnalyzer Cloud, and FortiManager currently running the affected versions.\u003c/li\u003e\n\u003cli\u003ePrioritize the application of patches once Fortinet releases security updates for these products.\u003c/li\u003e\n\u003cli\u003eMonitor administrative GUI access logs for unusual or unexpected requests emanating from authenticated administrator sessions until patches are applied.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-12T00:18:58Z","date_published":"2026-11-12T00:18:58Z","id":"https://feed.craftedsignal.io/briefs/2026-11-fortinet-cve-2026-126214/","summary":"An authentication bypass by spoofing vulnerability in multiple versions of FortiAnalyzer, FortiAnalyzer Cloud, and FortiManager allows an authenticated administrator to perform privilege escalation or impersonate internal services via crafted GUI requests.","title":"Fortinet FortiAnalyzer and FortiManager: Authentication bypass and privilege escalation (CVE-2026-126214)","url":"https://feed.craftedsignal.io/briefs/2026-11-fortinet-cve-2026-126214/"},{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-126211"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FortiAnalyzer (8.0.0 through 8.0.1)","FortiAnalyzer (7.6.1 through 7.6.7)","FortiAnalyzer Cloud (8.0.0 through 8.0.1)","FortiAnalyzer Cloud (7.6.1 through 7.6.8)","FortiManager (8.0.0 through 8.0.1)","FortiManager (7.6.1 through 7.6.7)","FortiManager Cloud (8.0.0 through 8.0.1)","FortiManager Cloud (7.6.1 through 7.6.8)"],"_cs_severities":["high"],"_cs_tags":["cve","privilege-escalation","network"],"_cs_type":"advisory","_cs_vendors":["Fortinet"],"content_html":"\u003cp\u003eFortinet has disclosed an improper privilege management vulnerability (CVE-2026-126211) affecting multiple versions of FortiAnalyzer and FortiManager. The vulnerability allows an authenticated attacker who already possesses existing privileges to further escalate their permissions on the affected device. This is achieved by sending a crafted JSON-RPC request to the system.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated attacker to elevate their privileges, potentially resulting in unauthorized administrative access and control over the affected FortiAnalyzer or FortiManager instance.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eInventory all instances of FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud to identify versions within the affected ranges. Monitor official Fortinet security advisories for the release of patched versions and apply updates to all identified affected assets immediately upon availability.\u003c/p\u003e\n","date_modified":"2026-11-12T00:18:26Z","date_published":"2026-11-12T00:18:26Z","id":"https://feed.craftedsignal.io/briefs/2026-11-fortinet-privilege-elevation-cve-2026-126211/","summary":"An improper privilege management vulnerability in Fortinet FortiAnalyzer and FortiManager allows an authenticated privileged attacker to escalate their permissions using crafted JSON-RPC requests.","title":"Fortinet FortiAnalyzer and FortiManager: Improper privilege management (CVE-2026-126211)","url":"https://feed.craftedsignal.io/briefs/2026-11-fortinet-privilege-elevation-cve-2026-126211/"}],"language":"en","title":"CraftedSignal Threat Feed - FortiAnalyzer (8.0.0 Through 8.0.1)","version":"https://jsonfeed.org/version/1.1"}