{"id":"EM-20261112-S0GQ","url":"https://cyber.eventmonitor.net/incident/EM-20261112-S0GQ/critical-fortinet-fortianalyzer-vulnerability-cve-2026-126170/","type":"cve","title":"Critical Fortinet FortiAnalyzer Vulnerability (CVE-2026-126170)","subtitle":"CVE-2026-126170","subject":"CVE-2026-126170","status":"Developing","severity":"critical","affected":[],"headline":null,"born":"2026-11-12T03:55:58.000Z","firstSignal":"2026-11-11T22:17:15.340Z","lastSignal":"2026-11-12T03:55:58.000Z","updated":"2026-11-12T15:50:47.989Z","revision":1,"life":[{"status":"Born","at":"2026-11-12T03:55:58.000Z","why":"second independent source: C31 Vulners (new public exploits)"},{"status":"Developing","at":"2026-11-12T03:55:58.000Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-11-11T22:17:15.340Z","what":"First signal: C6 NVD CVE API 2.0"},{"at":"2026-11-12T03:55:58.000Z","what":"Born: second source, C31 Vulners (new public exploits). Page EM-20261112-S0GQ created."}],"stages":[{"name":"Disclosed","at":"2026-11-11T22:17:15.340Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-11T22:17:15.340Z","detail":"CVSS 9.8 · EPSS 0.6%"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":null,"detail":"None yet"},{"name":"Vendor Response","at":null,"detail":"None in sources yet"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-11-11T22:17:15.340Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":4,"title":"CVE-2026-126170 (CVSS 9.8)","text":"A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer Cloud 8.0.1 through 8.0.2, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer-BigData 7.6.0 through 7.6.2, FortiManager 8.0.0 through 8.0.2, FortiManager 7.6.0 through 7.6.7, FortiManager Cloud 8.0.1 through 8.0.2, FortiManager Cloud 7.6.0 through 7.6.7 may allow an unauthenticated attacker to execute unauthorized code or commands via a specially crafted HTTP request","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126170"},{"at":"2026-11-12T03:55:58.000Z","source":"C31","sourceName":"Vulners (new public exploits)","role":"Research & News","severity":3,"title":"Public exploit: Exploit for CVE-2026-126170","text":"# CVE-2026-126170 — FortiManager/FortiAnalyzer JSON injection in the JRPC API (CWE-116)\n\n| | |\n|---|---|\n| **CVE** | CVE-2026-126170 |\n| **Component** | Fortinet FortiManager and FortiAnalyzer — JSON-RPC (JRPC) API of the GUI component, `POST /jsonrpc` |\n| **Affected** | FortiAnalyzer 8.0.0–8.0.2…","url":"https://github.com/googlesky/CVE-2026-126170"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-11T22:17:15.340","score":9.8,"severity":"CRITICAL","desc":"A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer Cloud 8.0.1 through 8.0.2, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer-BigData 7.6.0 through 7.6.2, FortiManager 8.0.0 through 8.0.2…","product":"","seen":1794443466720},"kev":null,"epss":{"epss":0.00628,"pct":0.50588,"at":1794498647989},"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}