HIGHCVSS v3.1 8.0Vulnerability

CVE-2026-126181

A use of hard-coded credentials vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions may allow an adjacent-network authenticated attacker with user permission to join the FGFM configuration-sync mesh of the affected FortiGate deployment via the default pre-shared key.

Properties

Severity
HIGH
Nvd fetched at
2026-11-11T23:49:45.533241+00:00
Cvss severity
HIGH
Cvss score
8
Retrieved at
2026-11-11T23:50:18+00:00
Score
8
Cvss version
3.1
Last source
NVD
Cve id
CVE-2026-126181
Cvss vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
First seen by Signal
2026-11-11T23:46:41+00:00
Name
CVE-2026-126181
Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Published at
2026-11-11T22:17:16.987
Last modified
2026-11-11T22:17:16.987

Related Entities (1)

HAS_WEAKNESS (1)

Related research

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-126181 (CVSS v3.1 8) — Ninja Signal Threat Intelligence | Ninja Signal