Cve-2026-126223 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/cve-2026-126223/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 12 Nov 2026 00:23:04 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgFortinet FortiAnalyzer and FortiManager Buffer Overflow (CVE-2026-126223)https://feed.craftedsignal.io/briefs/2026-11-fortinet-fortianalyzer-fortimanager-buffer-overflow-cve-2026-126223/Thu, 12 Nov 2026 00:23:04 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-fortinet-fortianalyzer-fortimanager-buffer-overflow-cve-2026-126223/An authenticated administrator can exploit a stack-based buffer overflow in Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud via specially crafted JSON-RPC requests, resulting in potential unauthorized command execution or denial of service.CVE-2026-126223 is a stack-based buffer overflow vulnerability affecting specific versions of Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud. The vulnerability allows an authenticated administrator to execute unauthorized code or commands or cause a denial of service by sending specially crafted JSON-RPC requests. The vulnerability has a CVSS v3.1 base score of 7.2.

Impact

Successful exploitation allows an authenticated administrator to execute unauthorized code or commands or cause a denial of service on the affected devices.

Recommendation

Review the vendor security advisory and apply the recommended updates or mitigations provided by Fortinet for the affected versions.

]]>highadvisorycve-2026-126223buffer-overflowfortinet