CVE-2026-126253 A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow an....
CriticalCVSS 9.3
- Published
- Updated
- Exploit status
- No public exploit known
Description
A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow an unauthenticated attacker to broadcast LSA via specially crafted request
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fortinet fortios | >= 8.0.0, <= 8.0.1 | No fix listed |
| fortinet fortios | >= 7.6.0, <= 7.6.7 | No fix listed |
| fortinet fortios | >= 7.4.0, <= 7.4.12 | No fix listed |
| fortinet fortios | >= 7.2.0, <= 7.2.13 | No fix listed |
| fortinet fortios | >= 7.0.1, <= 7.0.19 | No fix listed |