CVE-2026-126181
CVSS Score
8.0
EPSS Score
0.0%
EPSS Percentile
0th
A use of hard-coded credentials vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions may allow an adjacent-network authenticated attacker with user permission to join the FGFM configuration-sync mesh of the affected FortiGate deployment via the default pre-shared key.
| CWE | CWE-798 |
| Vendor | fortinet |
| Product | fortimanager |
| Ecosystems | |
| Industries | SecurityNetworking |
| Published | Nov 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for fortinet fortimanager
Be the first to know when new high vulnerabilities affecting fortinet fortimanager are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C Attack Vector
Adjacent
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Fortinet / FortiManager
8.0.0 ≤ 8.0.1 7.6.0 ≤ 7.6.7 7.4.0 ≤ 7.4.11 7.2.0 ≤ 7.2.13