CVE-2026-126252

Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10 are affected by an SQL injection vulnerability (CWE-89) caused by improper neutralization of special elements. This flaw may allow an authenticated attacker to execute unauthorized code or commands via HTTP requests...