{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/fortianalyzer-cloud-8.0.0-8.0.1-7.6.0-7.6.7-7.4.1-7.4.11-7.2.1-7.2.12/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-126178"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FortiAnalyzer (8.0.0-8.0.1, 7.6.0-7.6.7, 7.4.0-7.4.11, 7.2.0-7.2.12)","FortiAnalyzer Cloud (8.0.0-8.0.1, 7.6.0-7.6.7, 7.4.1-7.4.11, 7.2.1-7.2.12)","FortiManager (8.0.0-8.0.1, 7.6.0-7.6.7, 7.4.0-7.4.11, 7.2.0-7.2.12)","FortiManager Cloud (8.0.0-8.0.1, 7.6.0-7.6.7, 7.4.1-7.4.11, 7.2.1-7.2.12)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Fortinet"],"content_html":"\u003cp\u003eA heap-based buffer overflow vulnerability (CVE-2026-126178) exists in various versions of Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud. This vulnerability can be exploited by an authenticated attacker with administrative privileges to execute unauthorized code or commands on the targeted appliance by sending a crafted request.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated administrative attacker to execute unauthorized code or commands, potentially compromising the confidentiality, integrity, and availability of the affected Fortinet management or analysis platforms.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all instances of FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud within the enterprise environment.\u003c/li\u003e\n\u003cli\u003eReview vendor advisories for patching requirements corresponding to the affected versions (8.0.0-8.0.1, 7.6.0-7.6.7, 7.4.0-7.4.11, 7.2.0-7.2.12).\u003c/li\u003e\n\u003cli\u003eImplement the principle of least privilege for administrative accounts to restrict the pool of potential attackers capable of exploiting this vulnerability.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-12T00:17:00Z","date_published":"2026-11-12T00:17:00Z","id":"https://feed.craftedsignal.io/briefs/2026-11-fortinet-fortianalyzer-fortimanager-rce-cve-2026-126178/","summary":"A heap-based buffer overflow vulnerability in multiple versions of FortiAnalyzer and FortiManager allows an authenticated administrative attacker to achieve remote code execution via a crafted request.","title":"Fortinet FortiAnalyzer and FortiManager: Heap-based Buffer Overflow (CVE-2026-126178)","url":"https://feed.craftedsignal.io/briefs/2026-11-fortinet-fortianalyzer-fortimanager-rce-cve-2026-126178/"}],"language":"en","title":"CraftedSignal Threat Feed - FortiAnalyzer Cloud (8.0.0-8.0.1, 7.6.0-7.6.7, 7.4.1-7.4.11, 7.2.1-7.2.12)","version":"https://jsonfeed.org/version/1.1"}