{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/fortianalyzer-cloud-7.6.0-through-7.6.7/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-126219"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FortiAnalyzer 8.0.0","FortiAnalyzer 7.6.0 through 7.6.7","FortiAnalyzer 7.4.0 through 7.4.11","FortiAnalyzer Cloud 8.0.0","FortiAnalyzer Cloud 7.6.0 through 7.6.7","FortiAnalyzer Cloud 7.4.1 through 7.4.11","FortiManager 8.0.0","FortiManager 7.6.0 through 7.6.7","FortiManager 7.4.0 through 7.4.11","FortiManager Cloud 8.0.0","FortiManager Cloud 7.6.0 through 7.6.7","FortiManager Cloud 7.4.1 through 7.4.11"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Fortinet"],"content_html":"\u003cp\u003eCVE-2026-126219 is an improper limitation of a pathname to a restricted directory (path traversal) vulnerability affecting multiple versions of Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud. An authenticated administrator may leverage this vulnerability to read or write arbitrary files or execute unauthorized code or commands via specially crafted requests to the GUI.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated administrator to interact with the underlying filesystem and execute unauthorized commands or code. The CVSS v3.1 Base Score is 7.2.\u003c/p\u003e\n","date_modified":"2026-11-12T00:22:05Z","date_published":"2026-11-12T00:22:05Z","id":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-126219/","summary":"CVE-2026-126219 is a path traversal vulnerability in Fortinet FortiAnalyzer and FortiManager that allows an authenticated administrator to read or write arbitrary files or execute unauthorized code or commands via specially crafted GUI requests.","title":"Fortinet FortiAnalyzer and FortiManager: Path traversal vulnerability (CVE-2026-126219)","url":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-126219/"}],"language":"en","title":"CraftedSignal Threat Feed - FortiAnalyzer Cloud 7.6.0 Through 7.6.7","version":"https://jsonfeed.org/version/1.1"}