Skip to content
Connect AISign inSign up free
CVE-2026-126253Not scored

CVE-2026-126253: Fortinet FortiOS vulnerability

Fortinet · FortiOS

Vendor fix available · Affected: Fortinet FortiOS · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)

  1. In CISA KEV: not seen
  2. Exploited (reported): not seen
  3. Scanning observed: not seen
  4. Proof of concept public: not seen
  5. Not establishedNothing in the sources we check
0.4%probability of exploitation in the next 30 days
31st percentile
050100

Higher than 31% of scored CVEs

Not scored yet. NVD has not published a CVSS score.

DescriptionNVD

A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow an unauthenticated attacker to broadcast LSA via specially crafted request

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
Fortinet
Published
November 2026

Coverage1 article · 1 outlet

First in our coverage: SecurityOnline, 10 Nov.

  1. Fortinet patches eight critical flaws across security products
    SecurityOnline · first in our coverage · mentions it in passing

New articles also arrive in the RSS feed.

References