FortiManager and FortiAnalyzer GUI flaws allow authenticated code execution
Original title: Improper control of generation of code in GUI
FG-IR-26-227 combines CWE-94 code injection and a CWE-120 buffer overflow, scored CVSS 7.2.
Fortinet revised FG-IR-26-227 on November 10. Code injection and a classic buffer overflow in the GUI of FortiManager, FortiAnalyzer and both cloud products may let a remote authenticated attacker execute unauthorized code or commands through crafted HTTP requests. The CVSSv3 score is 7.2. No affected versions, fixed release or exploitation status appears in the snippet.
Unconfirmed: Affected versions, a patch and real-world exploitation are not stated.
- Weaknesses cited are CWE-94 and CWE-120.
- The attack path is crafted HTTP requests.
- The attacker must already be authenticated.
- The advisory was revised on November 10, 2026.
Impact: remote authenticated code or command execution
| Product | Affected |
|---|---|
| Fortinet FortiManager | — |
| Fortinet FortiAnalyzer | — |
| Fortinet FortiManager Cloud | — |
| Fortinet FortiAnalyzer Cloud | — |
- Vendors
- Fortinet
From the original article
CVSSv3 Score: 7. 2 An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] and a Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability [CWE-120] in FortiManager, FortiAnalyzer, FortiManager Cloud, and FortiAnalyzer Cloud may allow a remote authenticated attacker to execute unauthorized code or commands via crafted HTTP requests. Revised on 2026-11-10 00:00:00
fortiguard.fortinet.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.