{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/fortianalyzer-cloud-8.0.0-8.0.1-7.6.3-7.6.7/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"id":"CVE-2026-126222"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FortiAnalyzer (8.0.0-8.0.1, 7.6.3-7.6.7)","FortiAnalyzer Cloud (8.0.0-8.0.1, 7.6.3-7.6.7)","FortiManager (8.0.0-8.0.1, 7.6.3-7.6.7)","FortiManager Cloud (8.0.0-8.0.1, 7.6.3-7.6.7)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Fortinet"],"content_html":"\u003cp\u003eCVE-2026-126222 is a path traversal vulnerability affecting multiple versions of Fortinet FortiAnalyzer and FortiManager appliances. An authenticated attacker with administrative privileges can leverage this flaw to execute unauthorized code or commands on the underlying system by submitting crafted requests. The vulnerability affects both on-premise and cloud-hosted instances of these products.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated administrator to execute arbitrary code or commands on the affected appliance. This could lead to full system compromise, data theft, or persistence within the management infrastructure.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eIdentify all instances of Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud within the environment. Consult the official Fortinet PSIRT advisory to confirm the specific patch releases for the impacted versions and apply the necessary firmware updates immediately.\u003c/p\u003e\n","date_modified":"2026-11-12T00:22:46Z","date_published":"2026-11-12T00:22:46Z","id":"https://feed.craftedsignal.io/briefs/2026-11-fortinet-path-traversal-cve-2026-126222/","summary":"An authenticated administrator can exploit a path traversal vulnerability in Fortinet FortiAnalyzer and FortiManager products to achieve remote code execution via crafted requests.","title":"Fortinet FortiAnalyzer and FortiManager Path Traversal (CVE-2026-126222)","url":"https://feed.craftedsignal.io/briefs/2026-11-fortinet-path-traversal-cve-2026-126222/"}],"language":"en","title":"CraftedSignal Threat Feed - FortiAnalyzer Cloud (8.0.0-8.0.1, 7.6.3-7.6.7)","version":"https://jsonfeed.org/version/1.1"}