Fortinet fortilogd spoofing flaw can disrupt high-availability state
CVSSv3 is 8.2 across Analyzer, Manager, and FortiSASE-Sovereign; no versions or exploitation are stated.
48
Product
FortiSASE-Sovereign
- Mentions · 7d3
- Mentions · 30d3
- All mentions3
- First seenNov 10, 2026
- Last mentioned21h ago
Timeline
3 articles · newest firstFortinet GUI OS command injection hits FortiManager and FortiAnalyzer
FG-IR-26-251 also names FortiSASE-Sovereign and is scored 7.2 for authenticated HTTP requests.
42
FortiManager GUI flaw lets authenticated users run out-of-scope commands
Fortinet rates the CWE-639 GUI flaw CVSS 8.7; the advisory gives no versions, fix, or exploitation status.
52
Appears with
- FortiManager Cloudproduct · 3
- FortiManagerproduct · 3
- Fortinetvendor · 3
- FortiAnalyzer Cloudproduct · 2
- FortiAnalyzerproduct · 2
- FortiAnalyzer-BigDataproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.