NewsFortinet PSIRT

    Improper control of generation of code in GUI

    Share
    CVSSv3 Score: 7.2 An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] and a Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability [CWE-120] in FortiManager, FortiAnalyzer, FortiManager Cloud, and FortiAnalyzer Cloud may allow a remote authenticated attacker to execute unauthorized code or commands via crafted HTTP requests. Revised on 2026-11-10 00:00:00

    Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-227

    ID