CVE-2026-126251 A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to bypass authentication and gain unauthorized...
CriticalCVSS 9.1
- Published
- Updated
- Exploit status
- No public exploit known
Description
A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to bypass authentication and gain unauthorized access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fortinet fortiauthenticator | >= 8.0.0, <= 8.0.3 | No fix listed |
| fortinet fortiauthenticator | >= 6.6.0, <= 6.6.10 | No fix listed |