CVE-2026-126261

{
  "etk_id": "ETK-2026-4108",
  "cve_id": "CVE-2026-126261",
  "display_id": "CVE-2026-126261",
  "ghsa_id": "GHSA-952j-p3c7-fpqx",
  "euvd_id": "EUVD-2026-123051",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Improper authorization in FortiManager FGFM service",
  "summary": "FortiManager 8.0.0, 7.6.0–7.6.7, 7.4.0–7.4.5, and 7.2.0–7.2.8 are affected by an authorization flaw in the FGFM service. An unauthenticated party may run commands or code if they can reach the FGFM port.",
  "mitigation": "Restrict FGFM connectivity to trusted FortiGate devices and management hosts using firewall rules or ACLs, and enable `fgfm-deny-unknown` where applicable. No fixed version is recorded in the available advisory data; remove public or untrusted network access to the FGFM port.",
  "vendor": "Fortinet",
  "product": "FortiManager",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "8.0.0",
        ">= 7.6.0, <= 7.6.7",
        ">= 7.4.0, <= 7.4.5",
        ">= 7.2.0, <= 7.2.8"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "FortiManager",
      "purl": null
    }
  ],
  "cwes": [
    285
  ],
  "cvss_score": 9,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 10.108491566666666,
  "t0_at": "2026-11-10T22:23:59.410000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-10T22:23:59.410000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-10T22:23:59.410000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-126261"
    }
  }
}