[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIOAcRfKLGnDCoBMrBwD-Yjl5rx9LVjrr2o-dq9x78PE":3},{"article":4,"iocs":40,"watch_terms":66,"solutions":67,"lesson":162},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"5e34252c-d21c-4b7c-b808-885eef57d4bf","Critical Fortinet Flaws Expose FortiManager and FortiAnalyzer to Remote Code Execution Without Login","critical-fortinet-flaws-expose-fortimanager-and-fortianalyzer-to-remote-code-exe-5ba18f","Fortinet has disclosed critical security flaws affecting FortiManager, FortiAnalyzer, and FortiOS, including weaknesses that could let attackers execute code without logging in. Published on November 10, 2026, the disclosures cover management APIs, device communication services, routing, and specific high availability setups. Attack requirements differ, making enabled features and network access central to assessing exposure. Critical […] The post Critical Fortinet Flaws Expose FortiManager and FortiAnalyzer to Remote Code Execution Without Login appeared first on Cyber Security News.","Fortinet has disclosed critical security flaws affecting FortiManager, FortiAnalyzer, and FortiOS, with some allowing unauthenticated remote code execution. The highest-rated issue, CVE-2026-126170 (CVSS 9.8), involves JSON injection in the JSON-RPC API, enabling code execution when the API is enabled. Other critical flaws include an authorization weakness in FortiManager's FGFM service (CVE-2026-126261) and SQL injection via OFTP (CVE-2026-126262) affecting FortiAnalyzer and FortiManager. Fortinet has released updates to address these vulnerabilities.","Fortinet disclosed critical vulnerabilities in FortiManager, FortiAnalyzer, and FortiOS, allowing RCE without login.","https:\u002F\u002Fcybersecuritynews.com\u002Fcritical-fortinet-flaws-patched\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002FCritical-Fortinet-Flaws-Patched.webp","2026-11-11T03:15:16+00:00","2026-11-11T04:00:20.390667+00:00",9,[17,20,23,25],{"name":18,"type":19},"Fortinet","vendor",{"name":21,"type":22},"FortiManager","product",{"name":24,"type":22},"FortiAnalyzer",{"name":26,"type":22},"FortiOS","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":27,"icon":29,"name":30,"slug":31},null,"Vulnerabilities","vulnerabilities",[33,35],{"category":34},{"id":27,"icon":29,"name":30,"slug":31},{"category":36},{"id":37,"icon":29,"name":38,"slug":39},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[41,45,48,51,54,57,60,63],{"type":42,"value":43,"context":44},"cve","CVE-2026-126170","JSON injection in JSON-RPC API for FortiManager and FortiAnalyzer",{"type":42,"value":46,"context":47},"CVE-2026-126261","Authorization weakness in FortiManager's FGFM service",{"type":42,"value":49,"context":50},"CVE-2026-126262","SQL injection via OFTP affecting FortiAnalyzer and FortiManager",{"type":42,"value":52,"context":53},"CVE-2026-126260","Pre-authentication server-side request forgery flaw in FortiAnalyzer and FortiManager",{"type":42,"value":55,"context":56},"CVE-2026-126254","Numeric truncation flaw in FortiOS BGP handling",{"type":42,"value":58,"context":59},"CVE-2026-126253","OSPF authentication bypass in FortiOS",{"type":42,"value":61,"context":62},"CVE-2026-126229","Authenticated administrator access to other VDOMs in FortiOS",{"type":42,"value":64,"context":65},"CVE-2026-126259","Command execution with super-admin privileges in specific FortiOS setups",[18,21,24],{"controls":68,"vendors":156},[69,98,127],{"slug":70,"name":71,"problem":72,"products":73},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[74,82,90],{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":99,"name":100,"problem":101,"products":102},"patch-management","Automated patch management","Known holes get closed in days, not months.",[103,111,119],{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"slug":128,"name":129,"problem":130,"products":131},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[132,140,148],{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":136,"product_name":137,"url":138,"description":139},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":141,"vendor_name":142,"vendor_logo":143,"product_slug":144,"product_name":145,"url":146,"description":147},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":149,"vendor_name":150,"vendor_logo":151,"product_slug":152,"product_name":153,"url":154,"description":155},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",[157],{"slug":158,"name":18,"logo_path":159,"roles":160},"fortinet","\u002Fvendor-logos\u002Ffortinet.png",[161],"affected",{"slug":163,"title":164,"body":165,"framework_refs":166,"framework_notes":172},"critical-fortinet-rce-flaws-demand-immediate-patching-of-network-management-platforms","Critical Fortinet RCE Flaws Demand Immediate Patching of Network Management Platforms","Multiple critical vulnerabilities in Fortinet's FortiManager and FortiAnalyzer platforms—including a CVSS 9.8 JSON injection flaw enabling unauthenticated remote code execution—expose core network management infrastructure to full compromise without requiring any login credentials. The root cause lies in insufficient input validation and authorization enforcement within exposed APIs and services, compounding risk when these management interfaces are reachable from untrusted networks. Because FortiManager and FortiAnalyzer sit at the heart of enterprise network operations, a successful exploit could grant attackers administrative control over the entire managed environment. Fortinet has released patches, but organizations that delay updates or leave management APIs unnecessarily exposed remain critically vulnerable. This incident underscores that network security appliances must themselves be treated as high-value attack surfaces requiring rigorous patch discipline and access controls.",[167,168,169,170,171],"CIS Control 7: Continuous Vulnerability Management (v8)","CIS Control 12: Network Infrastructure Management (v8)","NIST SP 800-53 SI-2: Flaw Remediation","OWASP A03:2021 Injection","NIS2 Article 21(2)(e)",{"NIS2 Article 21(2)(e)":173,"OWASP A03:2021 Injection":174,"NIST SP 800-53 SI-2: Flaw Remediation":175,"CIS Control 12: Network Infrastructure Management (v8)":176,"CIS Control 7: Continuous Vulnerability Management (v8)":177},"NIS2 Article 21(2)(e) mandates security in acquisition, development, and maintenance including vulnerability handling, requiring operators of essential services to have processes for rapidly addressing critical disclosed vulnerabilities like these Fortinet flaws.","The highest-severity flaw (CVE-2026-126170) is a JSON injection in the JSON-RPC API, which OWASP A03 directly addresses by requiring proper input validation and parameterization to prevent injection-based code execution.","SI-2 requires organizations to identify, report, and correct information system flaws in a timely manner, directly covering the need to apply Fortinet's released patches before attackers exploit these unauthenticated RCE vulnerabilities.","CIS Control 12 calls for securing and managing network infrastructure devices, including restricting management-plane access—which would have limited exposure of the vulnerable FortiManager API and FGFM service.","CIS Control 7 requires organizations to continuously assess and remediate vulnerabilities; applying Fortinet's patches promptly for these CVSS 9.8 flaws is precisely the prioritized remediation activity it mandates."]