CVE-2026-126238

An incorrect authorization vulnerability [CWE-863] exists in the rest-api component of Fortinet FortiAuthenticator . This flaw may allow an unauthenticated attacker to bypass authorization checks and gain unauthorized access to restricted functionality. The affected versions include FortiAuthenti...