CVE-2026-126252: SQL injection in FortiAuthenticator
Fortinet FortiAuthenticator versions 6.6.0–6.6.10 and 8.0.0–8.0.3 contain an SQL injection vulnerability that may allow an authenticated attacker to execute unauthorized code or commands via HTTP requests.
CERT24