EUVD-2026-123839

A use of hard-coded credentials vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions may allow an adjacent-network authenticated attacker with user permission to join the FGFM...

CVE-2026-126181

Fortinet FortiManager is impacted by a use of hard-coded credentials vulnerability (CWE-798) affecting versions 8.0.0 through 8.0.1 , 7.6.0 through 7.6.7 , 7.4.0 through 7.4.11 , and all versions of 7.2 . This flaw allows an authenticated attacker with user-level permissions on an adjacent networ...

PT-2026-145505

Name of the Vulnerable Software and Affected Versions FortiManager versions 8.0.0 through 8.0.1 FortiManager versions 7.6.0 through 7.6.7 FortiManager versions 7.4.0 through 7.4.11 FortiManager versions 7.2.x Description An issue involving hard-coded credentials allows an authenticated attacker o...

Use of hard-coded credentials

A Use of Hard-coded Credentials vulnerability CWE-798 in FortiManager cloud orchestration may allow an adjacent-network authenticated attacker with user permission to join the FGFM configuration-sync mesh of the affected FortiGate deployment via the default pre-shared key...