Vulnerabilities fixed in Fortinet FortiOS

Fortinet has addressed multiple vulnerabilities in FortiOS. Various vulnerabilities in FortiOS and other Fortinet products can lead to unauthorized access, network disruptions, or full system compromise. - SSLVPN: Traffic interception due to insufficient certificate validation. - Management...

CVE-2026-126259

A missing authentication for critical functionality vulnerability (CWE-306 ) in Fortinet FortiOS affects versions 8.0.0 , 7.6.0 through 7.6.7 , 7.4.0 through 7.4.12 , and 7.2.0 through 7.2.13 . An unauthenticated attacker can execute commands as a super admin by sending crafted HA packets in envi...

CVE-2026-126259

A missing authentication for critical function vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow an unauthenticated attacker with HA FGSP + standalone-config-sync, or autoscale to execute command as super adm...