{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/fortimanager-cloud-8.0.0-7.6.0-7.6.7-7.4.1-7.4.11-7.2.1-7.2.12/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-126179"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FortiAnalyzer (8.0.0, 7.6.0-7.6.7, 7.4.0-7.4.11, 7.2.0-7.2.12)","FortiAnalyzer Cloud (8.0.0, 7.6.0-7.6.7, 7.4.1-7.4.11, 7.2.1-7.2.12)","FortiManager (8.0.0, 7.6.0-7.6.7, 7.4.0-7.4.11, 7.2.0-7.2.12)","FortiManager Cloud (8.0.0, 7.6.0-7.6.7, 7.4.1-7.4.11, 7.2.1-7.2.12)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"threat","_cs_vendors":["Fortinet"],"content_html":"\u003cp\u003eCVE-2026-126179 is an OS command injection vulnerability caused by improper neutralization of special elements in OS commands within several Fortinet products. The vulnerability permits an authenticated administrator to execute unauthorized code or commands through specially crafted requests. As of the current disclosure, there is no information indicating exploitation in the wild, though the vulnerability has a CVSS v3.1 base score of 7.2.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated administrator to execute arbitrary code or commands on the affected system, potentially leading to full system compromise depending on the privileges of the administrator account involved.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eInventory all instances of FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud within the environment, specifically identifying versions within the affected ranges listed in this brief. Monitor for any administrative sessions or requests involving unusual characters or command-line patterns until updates are applied.\u003c/p\u003e\n","date_modified":"2026-11-12T00:17:09Z","date_published":"2026-11-12T00:17:09Z","id":"https://feed.craftedsignal.io/briefs/2026-11-fortinet-cve-2026-126179/","summary":"An OS command injection vulnerability in Fortinet FortiAnalyzer and FortiManager allows an authenticated administrator to execute unauthorized code or commands via specially crafted requests.","title":"Fortinet FortiAnalyzer and FortiManager: OS command injection (CVE-2026-126179)","url":"https://feed.craftedsignal.io/briefs/2026-11-fortinet-cve-2026-126179/"}],"language":"en","title":"CraftedSignal Threat Feed - FortiManager Cloud (8.0.0, 7.6.0-7.6.7, 7.4.1-7.4.11, 7.2.1-7.2.12)","version":"https://jsonfeed.org/version/1.1"}