CVE-2026-126257 A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to bypass credential valida...
CriticalCVSS 9.0
- Published
- Updated
- Exploit status
- No public exploit known
Description
A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to bypass credential validation in certain circumstances outside of the attacker's control and gain unauthorized access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fortinet fortiauthenticator | >= 8.0.0, <= 8.0.3 | No fix listed |
| fortinet fortiauthenticator | >= 6.6.0, <= 6.6.10 | No fix listed |