{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/fortimanager-8.0.0-8.0.2-7.6.0-7.6.7-7.4.0-7.4.11-7.2.x/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FortiOS (8.0.0-8.0.1, 7.6.0-7.6.7, 7.4.x, 7.2.x)","FortiManager (8.0.0-8.0.2, 7.6.0-7.6.7, 7.4.0-7.4.11, 7.2.x)","FortiAnalyzer (8.0.0-8.0.2, 7.6.0-7.6.7, 7.4.0-7.4.11, 7.2.x)","FortiManager Cloud (8.0.0-8.0.2, 7.6.x, 7.4.x, 7.2.x)","FortiAnalyzer Cloud (8.0.0-8.0.2, 7.6.x, 7.4.1-7.4.11, 7.2.x)","FortiAnalyzer-BigData (7.6.0-7.6.2)","FortiSASE","FortiSASE-Sovereign (26.2, 25.4, 25.3, 25.x)","FortiPAM (1.6.x, 1.5.x, 1.4.x, 1.3.x, 1.2.x, 1.1.x, 1.0.x)","FortiSandbox (5.0.0-5.0.5, 4.4.0-4.4.8)","FortiSandbox Cloud (5.0.4-5.0.5)","FortiSandbox PaaS (5.0.4-5.0.5)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","network-security","patch-management"],"_cs_type":"threat","_cs_vendors":["Fortinet"],"content_html":"\u003cp\u003eMultiple vulnerabilities have been identified across Fortinet product lines, including FortiOS, FortiManager, FortiAnalyzer, FortiSASE, FortiPAM, and FortiSandbox. The most severe flaws permit arbitrary code execution, which could allow an attacker to install software, modify or delete data, and create administrative accounts. As of this advisory, there are no reports of these vulnerabilities being exploited in the wild.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation could allow unauthorized arbitrary code execution, potential full system compromise, and privilege escalation depending on the account rights associated with the targeted service or session.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eIdentify all instances of affected Fortinet products within the environment based on the versions listed.\u003c/li\u003e\n\u003cli\u003eReview the official Fortinet security advisories to obtain specific patches for each product version.\u003c/li\u003e\n\u003cli\u003ePrioritize patching for internet-facing systems such as FortiManager and FortiOS gateways.\u003c/li\u003e\n\u003cli\u003eImplement a risk-based patch management cycle as outlined by the MS-ISAC guidance.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-11T07:21:10Z","date_published":"2026-11-11T07:21:10Z","id":"https://feed.craftedsignal.io/briefs/2026-11-fortinet-vulns/","summary":"Multiple vulnerabilities across various Fortinet products including FortiOS, FortiManager, and FortiAnalyzer enable arbitrary code execution, command injection, and other critical impacts.","title":"Fortinet Multiple Products: Multiple Vulnerabilities (CVE-2026-126xxx et al.)","url":"https://feed.craftedsignal.io/briefs/2026-11-fortinet-vulns/"}],"language":"en","title":"CraftedSignal Threat Feed - FortiManager (8.0.0-8.0.2, 7.6.0-7.6.7, 7.4.0-7.4.11, 7.2.x)","version":"https://jsonfeed.org/version/1.1"}