CVE-2026-126257: A use of hard-coded password vulnerability in Fortinet

A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to bypass credential validation in certain circumstances outside of the attacker's control and gain unauthorized access.

Related briefings

Browse the CVE database

Read the full analysis on IntelFusions