Fortinet revises FortiManager and FortiAnalyzer advisories without naming fixes
First merged summary.
On November 10, Fortinet revised multiple FortiManager and FortiAnalyzer advisories; versions, patches and exploitation remain unstated.
Fortinet PSIRT revised a set of FortiManager and FortiAnalyzer advisories on November 10, 2026, covering on-premises and Cloud editions. The notices describe authenticated command, code, SQL, template, path and format-string flaws, plus an authentication-bypass issue in fortilogd that can disrupt high availability. Stated scores range from CVSS 7.2 to 8.8. None of the snippets name affected versions, fixed builds, CVE identifiers or active exploitation.
- Revised IDs include FG-IR-26-220, 225, 227, 229, 230, 236, 237, 246 and 249.
- Highest stated scores are CVSS 8.8 for SQL injection and 8.4 for template injection.
- FG-IR-26-225 can give a Device Manager admin super-admin rights on managed FortiGates.
- Most flaws need an authenticated user; some require an administrator.
- FG-IR-26-229 covers fortilogd spoofing that can disrupt HA, including FortiSASE-Sovereign.
- Snippets omit versions, patches, CVE IDs and exploitation status.
Timeline
dated events in the reporting · oldest first- Nov 10, 2026Fortinet revised FortiManager and FortiAnalyzer PSIRT advisories. · Fortinet PSIRT
What each outlet adds
beyond the shared facts- Fortinet PSIRTLists advisory IDs, CWE classes, CVSS scores and product scope.
- Vendors
- Fortinet
Coverage
oldest first · one row per article · UTC- · 21h ago
Fortinet PSIRTFirst report
FortiManager and FortiAnalyzer path traversal lets admins write files
A crafted archive is the stated vector, CVSS is 7.2, and both Cloud products are in scope.
- · 21h ago
FortiManager and FortiAnalyzer code injection lets admins run commands
FG-IR-26-230 scores CVSS 7.2 and also covers both products’ cloud editions; no fix is stated.
- · 21h ago
FortiManager and FortiAnalyzer heap overflow lets admins run code
The CVSS 7.2 flaw is triggered by crafted JSON-RPC requests and can also cause a denial of service.
- · 21h ago
Admin path traversal in FortiManager and FortiAnalyzer can run commands
FG-IR-26-237 is a CWE-22 flaw scored CVSS 7.2 and requires existing admin privileges.
- · 21h ago
Authenticated FortiManager and FortiAnalyzer flaws allow file and command access
CVSS 7.2 issues also cover both Cloud editions; the November 10 revision states no versions or exploitation.
- · 21h ago
FortiManager and FortiAnalyzer SQL injection scores CVSS 7.1
An authenticated attacker can run unauthorized SQL commands through specially crafted requests.
- · 21h ago
FortiManager template injection can grant super admin on FortiGates
Fortinet rates the command-injection path CVSS 8.4; the notice does not name versions, fixes or active attacks.
- · 21h ago
Second FortiManager heap overflow allows admin code execution
FG-IR-26-223, scored CVSS 7.2, lets an authenticated admin run code through a crafted request.
- · 21h ago
FortiAnalyzer and FortiManager OS command injection scores CVSS 7.2
An authenticated privileged attacker can run unauthorized code via a crafted report schedule name.
- · 21h ago
Fortinet fortilogd spoofing flaw can disrupt high-availability state
CVSSv3 is 8.2 across Analyzer, Manager, and FortiSASE-Sovereign; no versions or exploitation are stated.
- · 21h ago
FortiManager and FortiAnalyzer GUI flaws allow authenticated code execution
FG-IR-26-227 combines CWE-94 code injection and a CWE-120 buffer overflow, scored CVSS 7.2.
- · 21h ago
FortiManager and FortiAnalyzer have authenticated OS command injection
Fortinet scores FG-IR-26-224 at 7.2 and names cloud editions, but no versions or CVE.
- · 21h ago
Restricted FortiManager users can run commands via template injection
Scored CVSS 7.2, it also hits FortiManager Cloud, FortiAnalyzer and FortiAnalyzer Cloud, with no exploitation stated.
- · 21h ago
SQL injection in FortiAnalyzer and FortiManager allows authenticated code execution
The CVSS 8.8 flaw also covers both Cloud products and is triggered by crafted JSON-RPC requests.
- · 21h ago
Fortinet RADIUS certificate flaw lets MITM impersonate the server
A rogue RADIUS server can be impersonated against FortiSASE Sovereign, FortiManager and FortiAnalyzer products, scored CVSS 7.5.
- · 21h ago
Fortinet GUI OS command injection hits FortiManager and FortiAnalyzer
FG-IR-26-251 also names FortiSASE-Sovereign and is scored 7.2 for authenticated HTTP requests.
- · 21h ago
FortiAnalyzer and FortiManager allow privilege elevation via JSON-RPC
An already privileged authenticated attacker can raise privileges with a crafted JSON-RPC request.
- · 21h ago
FortiManager argument injection lets privileged admins run commands
The CWE-88 issue is scored 7.2 and also covers both Cloud products; exploitation is not stated.
- · 21h ago
FortiManager and FortiAnalyzer API format-string flaw scores CVSS 7.2
An authenticated attacker can run unauthorized commands through a crafted HTTP request to the named cloud and on-prem APIs.
- · 21h ago
FortiAnalyzer and FortiManager HA plugin command injection scores 7.2
An authenticated attacker can run unauthorized commands by sending a crafted HTTP request to the system-ha plugin.