CVE-2026-126247: format string vulnerability in FortiAuthenticator

A use of externally controlled format string vulnerability affects FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. It may allow an authenticated privileged attacker to execute unauthorized code or commands via HTTP requests.