HIGHCVSS 7.20% EPSS
A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11 may allow an authenticated administrator to read or write arbitrary files or execute unauthorized code or commands via specially crafted requests to the GUI.
Published 2026-11-11 · last modified 2026-11-13
| Vendor | Product |
|---|---|
| fortinet | fortimanager |
Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.