What is GHSA-952j-p3c7-fpqx?

GHSA-952j-p3c7-fpqx is a security advisory published by GitHub Security Advisories with Critical severity. A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through...

Which CVE IDs does GHSA-952j-p3c7-fpqx cover?

GHSA-952j-p3c7-fpqx covers the following CVE IDs: CVE-2026-126261. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-952j-p3c7-fpqx?

GHSA-952j-p3c7-fpqx has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-952j-p3c7-fpqxCriticalCVSS 9.8

A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through...

Vendor

GitHub Security Advisories

Published

November 11, 2026

Last Modified

November 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-126261 →

📋 Description

A improper authorization vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.8 may allow an unauthenticated attacker that can reach the FGFM port to execute code or commands via crafted FGFM packets.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-126261
https://fortiguard.fortinet.com/psirt/FG-IR-26-275
https://github.com/advisories/GHSA-952j-p3c7-fpqx