{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-126175", "tracking": { "current_release_date": "2026-11-12T18:02:29.340854Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-126175", "initial_release_date": "2026-11-11T00:13:40.435457Z", "revision_history": [ { "date": "2026-11-11T00:13:40.435457Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (123).| Products created (2)." }, { "date": "2026-11-11T00:13:53.773863Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-11-11T03:41:48.393318Z", "number": "3", "summary": "Source connected.| CVE status created. (valid)" }, { "date": "2026-11-11T15:08:35.768066Z", "number": "4", "summary": "Source connected.| CVE status created. (valid)| Products connected (2).| References created (62)." }, { "date": "2026-11-11T15:08:36.731012Z", "number": "5", "summary": "NCSC Score updated." }, { "date": "2026-11-11T21:39:48.318152Z", "number": "6", "summary": "CVSS created.| CWES created (1).| Products created (136).| References created (1).| Description created for source.| Unknown change.| Product Identifiers created (124)." }, { "date": "2026-11-11T21:39:49.168382Z", "number": "7", "summary": "NCSC Score updated." }, { "date": "2026-11-11T22:26:36.120241Z", "number": "8", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (1).| CWES updated (1)." }, { "date": "2026-11-11T22:26:44.972758Z", "number": "9", "summary": "NCSC Score updated." }, { "date": "2026-11-12T11:57:29.328549Z", "number": "10", "summary": "Source connected.| CVE status created. (valid)" }, { "date": "2026-11-12T16:16:50.073440Z", "number": "11", "summary": "EPSS created.| Unknown change." }, { "date": "2026-11-12T16:20:32.383919Z", "number": "12", "summary": "NCSC Score updated." } ], "status": "interim", "version": "12" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:fortinet/7.2.10", "product": { "name": "vers:fortinet/7.2.10", "product_id": "CSAFPID-2835548" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.11", "product": { "name": "vers:fortinet/7.2.11", "product_id": "CSAFPID-3108034" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.12", "product": { "name": "vers:fortinet/7.2.12", "product_id": "CSAFPID-5775433" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.2", "product": { "name": "vers:fortinet/7.2.2", "product_id": "CSAFPID-1484041" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.3", "product": { "name": "vers:fortinet/7.2.3", "product_id": "CSAFPID-1484040" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.4", "product": { "name": "vers:fortinet/7.2.4", "product_id": "CSAFPID-1484039" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.5", "product": { "name": "vers:fortinet/7.2.5", "product_id": "CSAFPID-1484038" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.6", "product": { "name": "vers:fortinet/7.2.6", "product_id": "CSAFPID-2000362" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.7", "product": { "name": "vers:fortinet/7.2.7", "product_id": "CSAFPID-2000361" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.8", "product": { "name": "vers:fortinet/7.2.8", "product_id": "CSAFPID-2425331" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.9", "product": { "name": "vers:fortinet/7.2.9", "product_id": "CSAFPID-2425330" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.0", "product": { "name": "vers:fortinet/7.4.0", "product_id": "CSAFPID-1484037" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.1", "product": { "name": "vers:fortinet/7.4.1", "product_id": "CSAFPID-1484036" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.10", "product": { "name": "vers:fortinet/7.4.10", "product_id": "CSAFPID-5775499" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.11", "product": { "name": "vers:fortinet/7.4.11", "product_id": "CSAFPID-10076198" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.2", "product": { "name": "vers:fortinet/7.4.2", "product_id": "CSAFPID-1484035" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.3", "product": { "name": "vers:fortinet/7.4.3", "product_id": "CSAFPID-1484034" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.4", "product": { "name": "vers:fortinet/7.4.4", "product_id": "CSAFPID-2000360" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.5", "product": { "name": "vers:fortinet/7.4.5", "product_id": "CSAFPID-2425329" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.6", "product": { "name": "vers:fortinet/7.4.6", "product_id": "CSAFPID-2835547" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.7", "product": { "name": "vers:fortinet/7.4.7", "product_id": "CSAFPID-5474539" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.8", "product": { "name": "vers:fortinet/7.4.8", "product_id": "CSAFPID-5474538" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.9", "product": { "name": "vers:fortinet/7.4.9", "product_id": "CSAFPID-5474537" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.0", "product": { "name": "vers:fortinet/7.6.0", "product_id": "CSAFPID-2000359" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.1", "product": { "name": "vers:fortinet/7.6.1", "product_id": "CSAFPID-2633198" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.2", "product": { "name": "vers:fortinet/7.6.2", "product_id": "CSAFPID-2835546" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.3", "product": { "name": "vers:fortinet/7.6.3", "product_id": "CSAFPID-5036283" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.4", "product": { "name": "vers:fortinet/7.6.4", "product_id": "CSAFPID-5474536" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.5", "product": { "name": "vers:fortinet/7.6.5", "product_id": "CSAFPID-5474535" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.6", "product": { "name": "vers:fortinet/7.6.6", "product_id": "CSAFPID-10076197" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.7", "product": { "name": "vers:fortinet/7.6.7", "product_id": "CSAFPID-10076196" } }, { "category": "product_version_range", "name": "vers:semver/7.2.2|<=7.2.12", "product": { "name": "vers:semver/7.2.2|<=7.2.12", "product_id": "CSAFPID-5775298" } }, { "category": "product_version_range", "name": "vers:semver/7.4.0|<=7.4.11", "product": { "name": "vers:semver/7.4.0|<=7.4.11", "product_id": "CSAFPID-10084781" } }, { "category": "product_version_range", "name": "vers:semver/7.6.0|<=7.6.7", "product": { "name": "vers:semver/7.6.0|<=7.6.7", "product_id": "CSAFPID-10084782" } } ], "category": "product_name", "name": "FortiAnalyzer" }, { "branches": [ { "category": "product_version_range", "name": "vers:fortinet/7.2.10", "product": { "name": "vers:fortinet/7.2.10", "product_id": "CSAFPID-2965312" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.11", "product": { "name": "vers:fortinet/7.2.11", "product_id": "CSAFPID-5775442" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.12", "product": { "name": "vers:fortinet/7.2.12", "product_id": "CSAFPID-5775441" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.2", "product": { "name": "vers:fortinet/7.2.2", "product_id": "CSAFPID-2000444" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.3", "product": { "name": "vers:fortinet/7.2.3", "product_id": "CSAFPID-2000443" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.4", "product": { "name": "vers:fortinet/7.2.4", "product_id": "CSAFPID-2000442" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.5", "product": { "name": "vers:fortinet/7.2.5", "product_id": "CSAFPID-2000441" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.6", "product": { "name": "vers:fortinet/7.2.6", "product_id": "CSAFPID-2965316" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.7", "product": { "name": "vers:fortinet/7.2.7", "product_id": "CSAFPID-2965315" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.8", "product": { "name": "vers:fortinet/7.2.8", "product_id": "CSAFPID-2965314" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.9", "product": { "name": "vers:fortinet/7.2.9", "product_id": "CSAFPID-2965313" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.1", "product": { "name": "vers:fortinet/7.4.1", "product_id": "CSAFPID-2000440" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.10", "product": { "name": "vers:fortinet/7.4.10", "product_id": "CSAFPID-10076207" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.11", "product": { "name": "vers:fortinet/7.4.11", "product_id": "CSAFPID-10076206" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.2", "product": { "name": "vers:fortinet/7.4.2", "product_id": "CSAFPID-2000439" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.3", "product": { "name": "vers:fortinet/7.4.3", "product_id": "CSAFPID-2000438" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.4", "product": { "name": "vers:fortinet/7.4.4", "product_id": "CSAFPID-2965311" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.5", "product": { "name": "vers:fortinet/7.4.5", "product_id": "CSAFPID-2965310" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.6", "product": { "name": "vers:fortinet/7.4.6", "product_id": "CSAFPID-2965309" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.7", "product": { "name": "vers:fortinet/7.4.7", "product_id": "CSAFPID-5775440" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.8", "product": { "name": "vers:fortinet/7.4.8", "product_id": "CSAFPID-10076209" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.9", "product": { "name": "vers:fortinet/7.4.9", "product_id": "CSAFPID-10076208" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.0", "product": { "name": "vers:fortinet/7.6.0", "product_id": "CSAFPID-10076205" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.1", "product": { "name": "vers:fortinet/7.6.1", "product_id": "CSAFPID-10076204" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.2", "product": { "name": "vers:fortinet/7.6.2", "product_id": "CSAFPID-5775439" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.3", "product": { "name": "vers:fortinet/7.6.3", "product_id": "CSAFPID-6033318" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.4", "product": { "name": "vers:fortinet/7.6.4", "product_id": "CSAFPID-6033321" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.5", "product": { "name": "vers:fortinet/7.6.5", "product_id": "CSAFPID-10076203" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.6", "product": { "name": "vers:fortinet/7.6.6", "product_id": "CSAFPID-10076202" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.7", "product": { "name": "vers:fortinet/7.6.7", "product_id": "CSAFPID-10076201" } }, { "category": "product_version_range", "name": "vers:semver/7.2.2|<=7.2.13", "product": { "name": "vers:semver/7.2.2|<=7.2.13", "product_id": "CSAFPID-10084825" } }, { "category": "product_version_range", "name": "vers:semver/7.4.1|<=7.4.11", "product": { "name": "vers:semver/7.4.1|<=7.4.11", "product_id": "CSAFPID-10084789" } }, { "category": "product_version_range", "name": "vers:semver/7.6.0|<=7.6.7", "product": { "name": "vers:semver/7.6.0|<=7.6.7", "product_id": "CSAFPID-10084790" } } ], "category": "product_name", "name": "FortiAnalyzer Cloud" }, { "branches": [ { "category": "product_version_range", "name": "vers:fortinet/7.2.10", "product": { "name": "vers:fortinet/7.2.10", "product_id": "CSAFPID-2835554" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.11", "product": { "name": "vers:fortinet/7.2.11", "product_id": "CSAFPID-3108035" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.12", "product": { "name": "vers:fortinet/7.2.12", "product_id": "CSAFPID-5775435" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.2", "product": { "name": "vers:fortinet/7.2.2", "product_id": "CSAFPID-1484135" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.3", "product": { "name": "vers:fortinet/7.2.3", "product_id": "CSAFPID-1462691" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.4", "product": { "name": "vers:fortinet/7.2.4", "product_id": "CSAFPID-1462690" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.5", "product": { "name": "vers:fortinet/7.2.5", "product_id": "CSAFPID-1462689" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.6", "product": { "name": "vers:fortinet/7.2.6", "product_id": "CSAFPID-1462688" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.7", "product": { "name": "vers:fortinet/7.2.7", "product_id": "CSAFPID-1462687" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.8", "product": { "name": "vers:fortinet/7.2.8", "product_id": "CSAFPID-2000303" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.9", "product": { "name": "vers:fortinet/7.2.9", "product_id": "CSAFPID-2000302" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.0", "product": { "name": "vers:fortinet/7.4.0", "product_id": "CSAFPID-1462686" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.1", "product": { "name": "vers:fortinet/7.4.1", "product_id": "CSAFPID-1462685" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.10", "product": { "name": "vers:fortinet/7.4.10", "product_id": "CSAFPID-5775444" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.11", "product": { "name": "vers:fortinet/7.4.11", "product_id": "CSAFPID-10076167" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.2", "product": { "name": "vers:fortinet/7.4.2", "product_id": "CSAFPID-1462684" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.3", "product": { "name": "vers:fortinet/7.4.3", "product_id": "CSAFPID-1462683" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.4", "product": { "name": "vers:fortinet/7.4.4", "product_id": "CSAFPID-1462682" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.5", "product": { "name": "vers:fortinet/7.4.5", "product_id": "CSAFPID-2000301" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.6", "product": { "name": "vers:fortinet/7.4.6", "product_id": "CSAFPID-2835553" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.7", "product": { "name": "vers:fortinet/7.4.7", "product_id": "CSAFPID-5474548" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.8", "product": { "name": "vers:fortinet/7.4.8", "product_id": "CSAFPID-5474547" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.9", "product": { "name": "vers:fortinet/7.4.9", "product_id": "CSAFPID-5474545" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.0", "product": { "name": "vers:fortinet/7.6.0", "product_id": "CSAFPID-1462681" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.1", "product": { "name": "vers:fortinet/7.6.1", "product_id": "CSAFPID-1788036" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.2", "product": { "name": "vers:fortinet/7.6.2", "product_id": "CSAFPID-2835552" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.3", "product": { "name": "vers:fortinet/7.6.3", "product_id": "CSAFPID-5474543" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.4", "product": { "name": "vers:fortinet/7.6.4", "product_id": "CSAFPID-5474542" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.5", "product": { "name": "vers:fortinet/7.6.5", "product_id": "CSAFPID-5474541" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.6", "product": { "name": "vers:fortinet/7.6.6", "product_id": "CSAFPID-10076166" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.7", "product": { "name": "vers:fortinet/7.6.7", "product_id": "CSAFPID-10076165" } }, { "category": "product_version_range", "name": "vers:semver/7.2.2|<=7.2.12", "product": { "name": "vers:semver/7.2.2|<=7.2.12", "product_id": "CSAFPID-5775293" } }, { "category": "product_version_range", "name": "vers:semver/7.4.0|<=7.4.11", "product": { "name": "vers:semver/7.4.0|<=7.4.11", "product_id": "CSAFPID-10084802" } }, { "category": "product_version_range", "name": "vers:semver/7.6.0|<=7.6.7", "product": { "name": "vers:semver/7.6.0|<=7.6.7", "product_id": "CSAFPID-10075928" } } ], "category": "product_name", "name": "FortiManager" }, { "branches": [ { "category": "product_version_range", "name": "vers:fortinet/7.2.10", "product": { "name": "vers:fortinet/7.2.10", "product_id": "CSAFPID-2965319" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.11", "product": { "name": "vers:fortinet/7.2.11", "product_id": "CSAFPID-6033304" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.12", "product": { "name": "vers:fortinet/7.2.12", "product_id": "CSAFPID-6033303" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.13", "product": { "name": "vers:fortinet/7.2.13", "product_id": "CSAFPID-10076212" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.2", "product": { "name": "vers:fortinet/7.2.2", "product_id": "CSAFPID-2000315" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.3", "product": { "name": "vers:fortinet/7.2.3", "product_id": "CSAFPID-2000314" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.4", "product": { "name": "vers:fortinet/7.2.4", "product_id": "CSAFPID-2000313" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.5", "product": { "name": "vers:fortinet/7.2.5", "product_id": "CSAFPID-2000312" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.6", "product": { "name": "vers:fortinet/7.2.6", "product_id": "CSAFPID-2000311" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.7", "product": { "name": "vers:fortinet/7.2.7", "product_id": "CSAFPID-2000310" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.8", "product": { "name": "vers:fortinet/7.2.8", "product_id": "CSAFPID-2000309" } }, { "category": "product_version_range", "name": "vers:fortinet/7.2.9", "product": { "name": "vers:fortinet/7.2.9", "product_id": "CSAFPID-2965320" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.1", "product": { "name": "vers:fortinet/7.4.1", "product_id": "CSAFPID-2000308" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.10", "product": { "name": "vers:fortinet/7.4.10", "product_id": "CSAFPID-10076179" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.11", "product": { "name": "vers:fortinet/7.4.11", "product_id": "CSAFPID-10076178" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.12", "product": { "name": "vers:fortinet/7.4.12", "product_id": "CSAFPID-10076257" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.2", "product": { "name": "vers:fortinet/7.4.2", "product_id": "CSAFPID-2000307" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.3", "product": { "name": "vers:fortinet/7.4.3", "product_id": "CSAFPID-2000306" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.4", "product": { "name": "vers:fortinet/7.4.4", "product_id": "CSAFPID-2000305" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.5", "product": { "name": "vers:fortinet/7.4.5", "product_id": "CSAFPID-2000304" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.6", "product": { "name": "vers:fortinet/7.4.6", "product_id": "CSAFPID-2965318" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.7", "product": { "name": "vers:fortinet/7.4.7", "product_id": "CSAFPID-5775446" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.8", "product": { "name": "vers:fortinet/7.4.8", "product_id": "CSAFPID-10076181" } }, { "category": "product_version_range", "name": "vers:fortinet/7.4.9", "product": { "name": "vers:fortinet/7.4.9", "product_id": "CSAFPID-10076180" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.0", "product": { "name": "vers:fortinet/7.6.0", "product_id": "CSAFPID-10076177" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.1", "product": { "name": "vers:fortinet/7.6.1", "product_id": "CSAFPID-10076176" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.2", "product": { "name": "vers:fortinet/7.6.2", "product_id": "CSAFPID-5036308" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.3", "product": { "name": "vers:fortinet/7.6.3", "product_id": "CSAFPID-5775445" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.4", "product": { "name": "vers:fortinet/7.6.4", "product_id": "CSAFPID-6033302" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.5", "product": { "name": "vers:fortinet/7.6.5", "product_id": "CSAFPID-10076175" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.6", "product": { "name": "vers:fortinet/7.6.6", "product_id": "CSAFPID-10076174" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.7", "product": { "name": "vers:fortinet/7.6.7", "product_id": "CSAFPID-10076173" } }, { "category": "product_version_range", "name": "vers:fortinet/7.6.8", "product": { "name": "vers:fortinet/7.6.8", "product_id": "CSAFPID-10076256" } }, { "category": "product_version_range", "name": "vers:semver/7.2.2|<=7.2.13", "product": { "name": "vers:semver/7.2.2|<=7.2.13", "product_id": "CSAFPID-10084828" } }, { "category": "product_version_range", "name": "vers:semver/7.4.1|<=7.4.11", "product": { "name": "vers:semver/7.4.1|<=7.4.11", "product_id": "CSAFPID-10084807" } }, { "category": "product_version_range", "name": "vers:semver/7.6.0|<=7.6.7", "product": { "name": "vers:semver/7.6.0|<=7.6.7", "product_id": "CSAFPID-10084808" } } ], "category": "product_name", "name": "FortiManager Cloud" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1363409", "product_identification_helper": { "cpe": "cpe:/a:fortinet:fortianalyzer:-" } } } ], "category": "product_name", "name": "Fortinet FortiAnalyzer" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/unknown", "product": { "name": "vers:unknown/unknown", "product_id": "CSAFPID-1363397", "product_identification_helper": { "cpe": "cpe:/a:fortinet:fortimanager:-" } } } ], "category": "product_name", "name": "Fortinet FortiManager" } ], "category": "vendor", "name": "Fortinet" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-126175", "cwe": { "id": "CWE-89", "name": "Improper Neutralization of Special Elements used in an SQL Command" }, "notes": [ { "category": "description", "text": "An improper neutralization of special elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager and FortiManager Cloud may allow an authenticated attacker to execute unauthorized code or commands via crafted JSON-RPC requests.", "title": "fortinet - https://fortiguard.fortinet.com/psirt/FG-IR-26-221" }, { "category": "description", "text": "A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.2 through 7.2.12, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.2 through 7.2.13, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.2 through 7.2.12, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.2 through 7.2.13 may allow an authenticated attacker to execute unauthorized code or commands via crafted JSON-RPC requests.", "title": "cveprojectv5 - https://www.cve.org/CVERecord?id=CVE-2026-126175" }, { "category": "description", "text": "A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.2 through 7.2.12, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.2 through 7.2.13, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.2 through 7.2.12, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.2 through 7.2.13 may allow an authenticated attacker to execute unauthorized code or commands via crafted JSON-RPC requests.", "title": "nvd - https://nvd.nist.gov/vuln/detail/CVE-2026-126175" }, { "category": "other", "text": "0.0043", "title": "EPSS" }, { "category": "other", "text": "5.7", "title": "NCSC Score" }, { "category": "other", "text": "Is related to (a version of) an uncommon product, Is related to an uncommon product source, There is product data available from source Certbundde", "title": "NCSC Score top increasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-1462681", "CSAFPID-1462682", "CSAFPID-1462683", "CSAFPID-1462684", "CSAFPID-1462685", "CSAFPID-1462686", "CSAFPID-1462687", "CSAFPID-1462688", "CSAFPID-1462689", "CSAFPID-1462690", "CSAFPID-1462691", "CSAFPID-1484034", "CSAFPID-1484035", "CSAFPID-1484036", "CSAFPID-1484037", "CSAFPID-1484038", "CSAFPID-1484039", "CSAFPID-1484040", "CSAFPID-1484041", "CSAFPID-1484135", "CSAFPID-1788036", "CSAFPID-2000301", "CSAFPID-2000302", "CSAFPID-2000303", "CSAFPID-2000304", "CSAFPID-2000305", "CSAFPID-2000306", "CSAFPID-2000307", "CSAFPID-2000308", "CSAFPID-2000309", "CSAFPID-2000310", "CSAFPID-2000311", "CSAFPID-2000312", "CSAFPID-2000313", "CSAFPID-2000314", "CSAFPID-2000315", "CSAFPID-2000359", "CSAFPID-2000360", "CSAFPID-2000361", "CSAFPID-2000362", "CSAFPID-2000438", "CSAFPID-2000439", "CSAFPID-2000440", "CSAFPID-2000441", "CSAFPID-2000442", "CSAFPID-2000443", "CSAFPID-2000444", "CSAFPID-2425329", "CSAFPID-2425330", "CSAFPID-2425331", "CSAFPID-2633198", "CSAFPID-2835546", "CSAFPID-2835547", "CSAFPID-2835548", "CSAFPID-2835552", "CSAFPID-2835553", "CSAFPID-2835554", "CSAFPID-2965309", "CSAFPID-2965310", "CSAFPID-2965311", "CSAFPID-2965312", "CSAFPID-2965313", "CSAFPID-2965314", "CSAFPID-2965315", "CSAFPID-2965316", "CSAFPID-2965318", "CSAFPID-2965319", "CSAFPID-2965320", "CSAFPID-3108034", "CSAFPID-3108035", "CSAFPID-5036283", "CSAFPID-5036308", "CSAFPID-5474535", "CSAFPID-5474536", "CSAFPID-5474537", "CSAFPID-5474538", "CSAFPID-5474539", "CSAFPID-5474541", "CSAFPID-5474542", "CSAFPID-5474543", "CSAFPID-5474545", "CSAFPID-5474547", "CSAFPID-5474548", "CSAFPID-5775433", "CSAFPID-5775435", "CSAFPID-5775439", "CSAFPID-5775440", "CSAFPID-5775441", "CSAFPID-5775442", "CSAFPID-5775444", "CSAFPID-5775445", "CSAFPID-5775446", "CSAFPID-5775499", "CSAFPID-6033302", "CSAFPID-6033303", "CSAFPID-6033304", "CSAFPID-6033318", "CSAFPID-6033321", "CSAFPID-10076165", "CSAFPID-10076166", "CSAFPID-10076167", "CSAFPID-10076173", "CSAFPID-10076174", "CSAFPID-10076175", "CSAFPID-10076176", "CSAFPID-10076177", "CSAFPID-10076178", "CSAFPID-10076179", "CSAFPID-10076180", "CSAFPID-10076181", "CSAFPID-10076196", "CSAFPID-10076197", "CSAFPID-10076198", "CSAFPID-10076201", "CSAFPID-10076202", "CSAFPID-10076203", "CSAFPID-10076204", "CSAFPID-10076205", "CSAFPID-10076206", "CSAFPID-10076207", "CSAFPID-10076208", "CSAFPID-10076209", "CSAFPID-10076212", "CSAFPID-10076256", "CSAFPID-10076257", "CSAFPID-1363397", "CSAFPID-1363409", "CSAFPID-5775298", "CSAFPID-10084781", "CSAFPID-10084782", "CSAFPID-10084825", "CSAFPID-10084789", "CSAFPID-10084790", "CSAFPID-5775293", "CSAFPID-10084802", "CSAFPID-10075928", "CSAFPID-10084828", "CSAFPID-10084807", "CSAFPID-10084808" ] }, "references": [ { "category": "external", "summary": "Source - ncscclear", "url": "https://vulnerabilities.ncsc.nl/manual/CVE-2026-126175" }, { "category": "external", "summary": "Source - fortinet", "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-221" }, { "category": "external", "summary": "Source - hkcert", "url": "https://www.hkcert.org/security-bulletin/fortinet-products-multiple-vulnerabilities_20261111" }, { "category": "external", "summary": "Source - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4489.json" }, { "category": "external", "summary": "Source - nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-126175" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://www.cve.org/CVERecord?id=CVE-2026-126175" }, { "category": "external", "summary": "Source - ncscclear", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0488" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4489.json" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4489" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-190" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-192" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-193" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-194" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-195" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-196" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-197" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-198" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-199" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-200" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-201" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-203" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-204" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-205" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-206" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-207" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-208" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-209" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-210" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-211" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-212" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-216" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-217" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-218" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-219" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-220" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-221" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-223" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-224" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-225" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-227" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-228" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-229" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-230" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-231" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-232" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-233" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-234" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-235" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-236" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-237" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-239" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-240" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-241" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-243" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-244" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-246" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-247" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-249" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-250" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-251" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-267" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-268" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-269" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-270" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-272" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-274" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-275" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-276" }, { "category": "external", "summary": "Reference - certbundde", "url": "https://www.fortiguard.com/psirt/FG-IR-26-277" }, { "category": "external", "summary": "Reference - cveprojectv5; nvd", "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-221" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", "baseScore": 8.8, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-10075928", "CSAFPID-10076165", "CSAFPID-10076166", "CSAFPID-10076167", "CSAFPID-10076173", "CSAFPID-10076174", "CSAFPID-10076175", "CSAFPID-10076176", "CSAFPID-10076177", "CSAFPID-10076178", "CSAFPID-10076179", "CSAFPID-10076180", "CSAFPID-10076181", "CSAFPID-10076196", "CSAFPID-10076197", "CSAFPID-10076198", "CSAFPID-10076201", "CSAFPID-10076202", "CSAFPID-10076203", "CSAFPID-10076204", "CSAFPID-10076205", "CSAFPID-10076206", "CSAFPID-10076207", "CSAFPID-10076208", "CSAFPID-10076209", "CSAFPID-10076212", "CSAFPID-10076256", "CSAFPID-10076257", "CSAFPID-10084781", "CSAFPID-10084782", "CSAFPID-10084789", "CSAFPID-10084790", "CSAFPID-10084802", "CSAFPID-10084807", "CSAFPID-10084808", "CSAFPID-10084825", "CSAFPID-10084828", "CSAFPID-1363397", "CSAFPID-1363409", "CSAFPID-1462681", "CSAFPID-1462682", "CSAFPID-1462683", "CSAFPID-1462684", "CSAFPID-1462685", "CSAFPID-1462686", "CSAFPID-1462687", "CSAFPID-1462688", "CSAFPID-1462689", "CSAFPID-1462690", "CSAFPID-1462691", "CSAFPID-1484034", "CSAFPID-1484035", "CSAFPID-1484036", "CSAFPID-1484037", "CSAFPID-1484038", "CSAFPID-1484039", "CSAFPID-1484040", "CSAFPID-1484041", "CSAFPID-1484135", "CSAFPID-1788036", "CSAFPID-2000301", "CSAFPID-2000302", "CSAFPID-2000303", "CSAFPID-2000304", "CSAFPID-2000305", "CSAFPID-2000306", "CSAFPID-2000307", "CSAFPID-2000308", "CSAFPID-2000309", "CSAFPID-2000310", "CSAFPID-2000311", "CSAFPID-2000312", "CSAFPID-2000313", "CSAFPID-2000314", "CSAFPID-2000315", "CSAFPID-2000359", "CSAFPID-2000360", "CSAFPID-2000361", "CSAFPID-2000362", "CSAFPID-2000438", "CSAFPID-2000439", "CSAFPID-2000440", "CSAFPID-2000441", "CSAFPID-2000442", "CSAFPID-2000443", "CSAFPID-2000444", "CSAFPID-2425329", "CSAFPID-2425330", "CSAFPID-2425331", "CSAFPID-2633198", "CSAFPID-2835546", "CSAFPID-2835547", "CSAFPID-2835548", "CSAFPID-2835552", "CSAFPID-2835553", "CSAFPID-2835554", "CSAFPID-2965309", "CSAFPID-2965310", "CSAFPID-2965311", "CSAFPID-2965312", "CSAFPID-2965313", "CSAFPID-2965314", "CSAFPID-2965315", "CSAFPID-2965316", "CSAFPID-2965318", "CSAFPID-2965319", "CSAFPID-2965320", "CSAFPID-3108034", "CSAFPID-3108035", "CSAFPID-5036283", "CSAFPID-5036308", "CSAFPID-5474535", "CSAFPID-5474536", "CSAFPID-5474537", "CSAFPID-5474538", "CSAFPID-5474539", "CSAFPID-5474541", "CSAFPID-5474542", "CSAFPID-5474543", "CSAFPID-5474545", "CSAFPID-5474547", "CSAFPID-5474548", "CSAFPID-5775293", "CSAFPID-5775298", "CSAFPID-5775433", "CSAFPID-5775435", "CSAFPID-5775439", "CSAFPID-5775440", "CSAFPID-5775441", "CSAFPID-5775442", "CSAFPID-5775444", "CSAFPID-5775445", "CSAFPID-5775446", "CSAFPID-5775499", "CSAFPID-6033302", "CSAFPID-6033303", "CSAFPID-6033304", "CSAFPID-6033318", "CSAFPID-6033321" ] } ], "title": "CVE-2026-126175" } ] }