{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/fortianalyzer-8.0.0-through-8.0.2/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-126170"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FortiAnalyzer","FortiAnalyzer (8.0.0 through 8.0.2)","FortiAnalyzer (7.6.0 through 7.6.7)","FortiAnalyzer Cloud (8.0.1 through 8.0.2)","FortiAnalyzer Cloud (7.6.0 through 7.6.7)","FortiAnalyzer-BigData (7.6.0 through 7.6.2)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","network-security","fortinet"],"_cs_type":"advisory","_cs_vendors":["Fortinet"],"content_html":"\u003cp\u003eThe German Federal Office for Information Security (BSI) has issued an advisory regarding multiple vulnerabilities in Fortinet FortiAnalyzer. These flaws permit unauthenticated remote attackers to perform arbitrary code execution, sensitive information disclosure, security control bypasses, and cross-site scripting (XSS). Specific CVE identifiers were not provided in the source material.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all deployed FortiAnalyzer instances to determine exposure.\u003c/li\u003e\n\u003cli\u003eMonitor official Fortinet security advisories for specific patch releases and technical details regarding these vulnerabilities.\u003c/li\u003e\n\u003cli\u003eImplement strict network access controls to limit management interface exposure to trusted administrative subnets only.\u003c/li\u003e\n\u003cli\u003eReview administrative access logs for unusual activity originating from unexpected IP addresses.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-12T00:16:11Z","date_published":"2026-11-10T16:30:06Z","id":"https://feed.craftedsignal.io/briefs/2026-11-fortinet-fortianalyzer-vulnerabilities/","summary":"The BSI reports multiple vulnerabilities in Fortinet FortiAnalyzer that allow remote, unauthenticated attackers to execute arbitrary code, disclose sensitive information, bypass security controls, and perform cross-site scripting (XSS) attacks.","title":"Fortinet FortiAnalyzer: Multiple vulnerabilities","url":"https://feed.craftedsignal.io/briefs/2026-11-fortinet-fortianalyzer-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - FortiAnalyzer (8.0.0 Through 8.0.2)","version":"https://jsonfeed.org/version/1.1"}