FortiManager GUI flaw lets authenticated users run out-of-scope commands
Original title: Authorization bypass through user-controlled key in GUI
Fortinet rates the CWE-639 GUI flaw CVSS 8.7; the advisory gives no versions, fix, or exploitation status.
Fortinet PSIRT revised FG-IR-26-228 on November 10. An authorization bypass through a user-controlled key in the FortiManager, FortiManager Cloud, and FortiSase-Sovereign GUI may let an authenticated attacker execute commands outside the expected scope with a crafted HTTP request. The advisory scores the issue CVSSv3 8.7 and does not state affected versions, a fix, or exploitation.
Unconfirmed: Affected versions, fixed releases, and exploitation status are not stated.
- CVSSv3 score is 8.7; weakness is CWE-639.
- Attacker must already be authenticated.
- Products named: FortiManager, FortiManager Cloud, and FortiSase-Sovereign.
- Advisory was revised on November 10, 2026.
Impact: Authenticated command execution outside expected GUI scope
| Product | Affected |
|---|---|
| Fortinet FortiManager | — |
| Fortinet FortiManager Cloud | — |
| Fortinet FortiSase-Sovereign | — |
- Vendors
- Fortinet
From the original article
CVSSv3 Score: 8. 7 An Authorization Bypass Through User-Controlled Key vulnerability [cwe-639] in FortiManager, FortiManager Cloud and FortiSase-Sovereign GUI may allow an authenticated attacker to execute commands outside of the expected scope via specially crafted HTTP request. Revised on 2026-11-10 00:00:00
fortiguard.fortinet.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.