CVE-2026-126226 | Fortinet FortiAnalyzer up to 8.0.0 Report Schedule report schedule name os command injection

A vulnerability marked as very critical has been reported in Fortinet FortiAnalyzer, FortiAnalyzer Cloud, FortiManager and FortiManager Cloud up to 8.0.0. This affects an unknown part of the component Report Schedule. The manipulation of the argument report schedule name leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-126226. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More