Skip to content

CVE record · 1 source

CVE-2026-126176

CVSS 8.1

A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0…

Vendor: Fortinet
Product: FortiManager, FortiAnalyzer, FortiAnalyzer Cloud, FortiManager Cloud
CVSS v3.1: 8.1 AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L
Weakness: CWE-91
Exposure class: Network management

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

36

CVE NVD 3h ago

A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0…

A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0…

CVSS 8.1 CVE-2026-126176 Fortinet