EUVD-2026-123842

A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0...

CVE-2026-126180

A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0...

CVE-2026-126180

A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0...

CVE-2026-126180

A vulnerability exists in FortiManager and FortiManager Cloud due to an improper neutralization of special elements used in a template engine [CWE-1336]. This flaw allows a low-privileged Device Manager admin to obtain super admin privileges on managed FortiGates by injecting malicious commands. ...

PT-2026-145504

Name of the Vulnerable Software and Affected Versions FortiManager versions 8.0.0 through 8.0.1 FortiManager versions 7.6.0 through 7.6.7 FortiManager versions 7.4.0 through 7.4.11 FortiManager version 7.2 FortiManager Cloud versions 8.0.0 through 8.0.1 FortiManager Cloud versions 7.6.0 through...

CVE-2026-126180: Fortinet: A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiManager 8.0.0…

A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions, FortiManager Cloud 8.0.0 through 8.0.1, FortiManager Cloud 7.6.0...

Improper neutralization of special elements used in a template engine i

An Improper Neutralization of Special Elements Used in a Template Engine vulnerability CWE-1336 in FortiManager and FortiManager Cloud may allow a low privileged Device Manager admin to obtain super admin privilege on managed FortiGates via injecting malicious commands...