{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "FortiOS ist ein gehärtetes Betriebssystem für FortiGate Plattformen.\r\nFortiManager Security Management Appliances ermöglicht die Verwaltung von Fortinet Network Security Geräten.\r\nFortiMail ist eine Aplliance zum Schutz gegen die von E-Mails übertragenen Bedrohungen.\r\nFortiAnalyzer ist eine Plattform zur Protokollverwaltung, Analyse und Berichterstellung.\r\nFortiAuthenticator erweitert die Fähigkeit zur Multi-Faktor-Authentifizierung auf mehrere FortiGate Appliances und auf Lösungen von Drittanbietern, die RADIUS oder LDAP unterstützen.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiOS, Fortinet FortiManager, Fortinet FortiMail, Fortinet FortiAnalyzer und Fortinet FortiAuthenticator ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsmechanismen zu umgehen, seine Berechtigungen zu erweitern, um Daten zu manipulieren und um einen Denial of Service herbezizuführen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Appliance",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-4519 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4519.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-4519 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4519"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-273 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-273"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-226 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-226"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-202 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-202"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-213 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-213"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-214 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-214"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-215 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-215"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-222 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-222"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-238 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-238"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-242 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-242"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-245 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-245"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-248 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-248"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-191 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-191"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-252 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-252"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-253 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-253"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-254 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-254"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-255 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-255"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-256 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-256"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-257 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-257"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-258 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-258"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-259 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-259"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-260 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-260"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-261 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-261"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-262 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-262"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-263 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-263"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-264 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-264"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-265 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-265"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-266 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-266"
    }, {
      "category" : "external",
      "summary" : "FortiGuard PSIRT Advisory FG-IR-26-271 vom 2026-11-11",
      "url" : "https://fortiguard.fortinet.com/psirt/FG-IR-26-271"
    } ],
    "source_lang" : "en-US",
    "title" : "Fortinet Produkte: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-11-11T23:00:00.000+00:00",
      "generator" : {
        "date" : "2026-11-12T11:12:02.931+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.7.0"
        }
      },
      "id" : "WID-SEC-W-2026-4519",
      "initial_release_date" : "2026-11-11T23:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-11-11T23:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      } ],
      "status" : "final",
      "version" : "1"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "category" : "product_name",
        "name" : "Fortinet FortiAnalyzer",
        "product" : {
          "name" : "Fortinet FortiAnalyzer",
          "product_id" : "T040175",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:fortinet:fortianalyzer:-"
          }
        }
      }, {
        "category" : "product_name",
        "name" : "Fortinet FortiAuthenticator",
        "product" : {
          "name" : "Fortinet FortiAuthenticator",
          "product_id" : "1002224",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:fortinet:fortiauthenticator:-"
          }
        }
      }, {
        "category" : "product_name",
        "name" : "Fortinet FortiMail",
        "product" : {
          "name" : "Fortinet FortiMail",
          "product_id" : "T040182",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:fortinet:fortimail:-"
          }
        }
      }, {
        "category" : "product_name",
        "name" : "Fortinet FortiManager",
        "product" : {
          "name" : "Fortinet FortiManager",
          "product_id" : "T040177",
          "product_identification_helper" : {
            "cpe" : "cpe:/a:fortinet:fortimanager:-"
          }
        }
      }, {
        "category" : "product_name",
        "name" : "Fortinet FortiOS",
        "product" : {
          "name" : "Fortinet FortiOS",
          "product_id" : "T040180",
          "product_identification_helper" : {
            "cpe" : "cpe:/o:fortinet:fortios:-"
          }
        }
      } ],
      "category" : "vendor",
      "name" : "Fortinet"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-126259",
    "product_status" : {
      "known_affected" : [ "T040180" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126259"
  }, {
    "cve" : "CVE-2026-126181",
    "product_status" : {
      "known_affected" : [ "T040177" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126181"
  }, {
    "cve" : "CVE-2026-126150",
    "product_status" : {
      "known_affected" : [ "T040182" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126150"
  }, {
    "cve" : "CVE-2026-126161",
    "product_status" : {
      "known_affected" : [ "T040182" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126161"
  }, {
    "cve" : "CVE-2026-126162",
    "product_status" : {
      "known_affected" : [ "T040182" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126162"
  }, {
    "cve" : "CVE-2026-126163",
    "product_status" : {
      "known_affected" : [ "T040182" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126163"
  }, {
    "cve" : "CVE-2026-126176",
    "product_status" : {
      "known_affected" : [ "T040175", "T040177" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126176"
  }, {
    "cve" : "CVE-2026-126177",
    "product_status" : {
      "known_affected" : [ "T040175", "T040177" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126177"
  }, {
    "cve" : "CVE-2026-126223",
    "product_status" : {
      "known_affected" : [ "T040175", "T040177" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126223"
  }, {
    "cve" : "CVE-2026-126227",
    "product_status" : {
      "known_affected" : [ "T040175", "T040177" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126227"
  }, {
    "cve" : "CVE-2026-126230",
    "product_status" : {
      "known_affected" : [ "T040175", "T040177" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126230"
  }, {
    "cve" : "CVE-2026-126233",
    "product_status" : {
      "known_affected" : [ "T040175", "T040177" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126233"
  }, {
    "cve" : "CVE-2026-121526",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-121526"
  }, {
    "cve" : "CVE-2026-126237",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126237"
  }, {
    "cve" : "CVE-2026-126238",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126238"
  }, {
    "cve" : "CVE-2026-126239",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126239"
  }, {
    "cve" : "CVE-2026-126240",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126240"
  }, {
    "cve" : "CVE-2026-126241",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126241"
  }, {
    "cve" : "CVE-2026-126242",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126242"
  }, {
    "cve" : "CVE-2026-126243",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126243"
  }, {
    "cve" : "CVE-2026-126244",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126244"
  }, {
    "cve" : "CVE-2026-126245",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126245"
  }, {
    "cve" : "CVE-2026-126246",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126246"
  }, {
    "cve" : "CVE-2026-126247",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126247"
  }, {
    "cve" : "CVE-2026-126248",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126248"
  }, {
    "cve" : "CVE-2026-126249",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126249"
  }, {
    "cve" : "CVE-2026-126250",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126250"
  }, {
    "cve" : "CVE-2026-126251",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126251"
  }, {
    "cve" : "CVE-2026-126252",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126252"
  }, {
    "cve" : "CVE-2026-126257",
    "product_status" : {
      "known_affected" : [ "1002224" ]
    },
    "release_date" : "2026-11-11T23:00:00.000+00:00",
    "title" : "CVE-2026-126257"
  } ]
}