Authenticated FortiManager and FortiAnalyzer flaws allow file and command access
Original title: Improper limitation of a pathname to a restricted directory
CVSS 7.2 issues also cover both Cloud editions; the November 10 revision states no versions or exploitation.
Fortinet PSIRT describes CWE-22 and CWE-74 flaws in FortiManager, FortiManager Cloud, FortiAnalyzer, and FortiAnalyzer Cloud. An authenticated administrator may read or write arbitrary files or run unauthorized code or commands through crafted GUI requests. The advisory was revised on November 10, 2026. The snippet does not name fixed builds.
Unconfirmed: The snippet does not state affected versions, fixes, or whether the flaws are exploited.
- CVSSv3 score is 7.2.
- Access requires an authenticated administrator.
- The issues are reached through the GUI.
- Advisory identifier is FG-IR-26-236.
Impact: read or write arbitrary files or run commands
| Product | Affected |
|---|---|
| Fortinet FortiManager | — |
| Fortinet FortiManager Cloud | — |
| Fortinet FortiAnalyzer | — |
| Fortinet FortiAnalyzer Cloud | — |
- Vendors
- Fortinet
From the original article
CVSSv3 Score: 7. 2 An External Control of File Name or Path vulnerability [CWE-22] and an Improper Neutralization of Special Elements vulnerability [CWE-74] in FortiManager, FortiManager Cloud, FortiAnalyzer, and FortiAnalyzer Cloud may allow an authenticated administrator to read or write arbitrary files or execute unauthorized code or commands via specially crafted requests to the GUI.
fortiguard.fortinet.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.