What is CVE-2026-121530?

CVE-2026-121530 is a medium-severity vulnerability in Fortinet Fortios, classified under Improper Authentication. CVSS score: 6.6/10. Published 2026-11-10.

How severe is CVE-2026-121530?

Medium severity. CVSS v3 base score is 6.6 out of 10.

Auth bypass in Fortinet Fortios

CVE-2026-121530

A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated attacker to gain improper access control via an invalid token after entering a valid username and password

Vulnerability class: Broken Authentication

Published 2026-11-10 · last modified 2026-11-10.

CVSS v3 metric

CVSS v3 base score 6.6 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.

Affected products

Fortinet Fortios

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

fortiguard.fortinet.com/psirt/FG-IR-26-195

Frequently asked questions

What is CVE-2026-121530?: CVE-2026-121530 is a medium-severity vulnerability in Fortinet Fortios, classified under Improper Authentication. CVSS score: 6.6/10. Published 2026-11-10.
How severe is CVE-2026-121530?: Medium severity. CVSS v3 base score is 6.6 out of 10.