What is GHSA-j3f4-wmxp-qvcr?

GHSA-j3f4-wmxp-qvcr is a security advisory published by GitHub Security Advisories with Critical severity. A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1...

Which CVE IDs does GHSA-j3f4-wmxp-qvcr cover?

GHSA-j3f4-wmxp-qvcr covers the following CVE IDs: CVE-2026-126253. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-j3f4-wmxp-qvcr?

GHSA-j3f4-wmxp-qvcr has a CVSS v3 base score of 9.3, published by GitHub Security Advisories.

GHSA-j3f4-wmxp-qvcrCriticalCVSS 9.3

A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1...

Vendor

GitHub Security Advisories

Published

November 12, 2026

Last Modified

November 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-126253 →

📋 Description

A authentication bypass by primary weakness vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow an unauthenticated attacker to broadcast LSA via specially crafted request

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-126253
https://fortiguard.fortinet.com/psirt/FG-IR-26-267
https://github.com/advisories/GHSA-j3f4-wmxp-qvcr