FortiManager and FortiAnalyzer heap overflow lets admins run code
Original title: Heap-based buffer overflow
The CVSS 7.2 flaw is triggered by crafted JSON-RPC requests and can also cause a denial of service.
Fortinet PSIRT revised FG-IR-26-232 on November 10, describing a heap-based buffer overflow in FortiManager, FortiManager Cloud, FortiAnalyzer and FortiAnalyzer Cloud. An authenticated administrator may run unauthorized code or commands, or cause a denial of service, through specially crafted JSON-RPC requests. The snippet gives no affected versions, fix, or exploitation status.
Unconfirmed: Affected versions, a fix, and whether the flaw is exploited are not stated.
- CVSSv3 score is 7.2; the weakness is CWE-122.
- The attacker must already be an authenticated administrator.
- The advisory was revised on November 10, 2026.
Impact: Authenticated admin code execution or denial of service
| Product | Affected |
|---|---|
| Fortinet FortiManager | — |
| Fortinet FortiManager Cloud | — |
| Fortinet FortiAnalyzer | — |
| Fortinet FortiAnalyzer Cloud | — |
- Vendors
- Fortinet
From the original article
CVSSv3 Score: 7. 2 A Heap-based Buffer Overflow vulnerability [CWE-122] in FortiManager, FortiManager Cloud, FortiAnalyzer and FortiAnalyzer Cloud may allow an authenticated administrator to execute unauthorized code or commands or cause a denial of service via specially crafted JSON-RPC requests. Revised on 2026-11-10 00:00:00
fortiguard.fortinet.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.