CVE-2026-126225

A missing authorization vulnerability (CWE-862 ) exists in FortiAnalyzer , FortiAnalyzer Cloud , FortiManager , and FortiManager Cloud (versions 8.0.0 through 8.0.1 and 7.6.7). An authenticated attacker can leverage a crafted JSON-RPC request to perform privilege elevation . The impact includes h...