CVE-2026-121526

Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10 are susceptible to a URL redirection to untrusted site (open redirect) vulnerability [CWE-601]. An unauthenticated attacker can exploit this by sending crafted HTTP requests to the /login endpoint, potentially redir...