Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 76

Export CSV
CVE-2026-126144

OS Command Injection in Fortinet FortiMail, FortiRecorder, and FortiVoice

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.4, FortiMail 7.4.0 through 7.4.6, FortiMail 7.2 all versions, FortiRecorder 7.6.0 through 7.6.2, FortiRecorder 7.2.0 through 7.2.12, FortiRecorder 7.0.0 through 7.0.6, FortiVoice 8.0.0 through 8.0.1, FortiVoice 7.4.0 through 7.4.2, FortiVoice 7.2.0 through 7.2.5, FortiVoice 7.0.0 through 7.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail Fortirecorder Fortivoice
CVE-2026-126155

Unauthenticated Remote Authorization Bypass in FortiMail Enabling IBE Session Hijacking

A incorrect authorization vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to obtain an authenticated IBE webmail session as any IBE recipient and read or send their encrypted mail via crafted HTTP requests.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126166

FortiMail Command Injection Allows Remote Execution and Tenant User Deletion

A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.2, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated remote attacker with domain admin or admin privileges to delete users of other tenant domains on a paired FortiAuthenticator, execute arbitrary code as root or arbitrary CLI commands, and read or write arbitrary files as root via crafted HTTP requests to the administrative interface.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126263

Authenticated SQL Injection in FortiMail Permits Unauthorized Code Execution

A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.4, FortiMail 7.4.0 through 7.4.6 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted requests.

CVSS 3.1 · 9.4 Critical EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126150

Weak Password Reset Allows Unauthenticated Account Takeover in Fortinet FortiMail

A weak password recovery mechanism for forgotten password vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 through 7.6.5, FortiMail 7.4.0 through 7.4.7, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to reset the password of an arbitrary IBE webmail user and take over their account via specially crafted HTTP requests.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126157

Unauthenticated HTTP Requests Allow Unauthorized Access of Secure Email Accounts in FortiMail

A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to gain access to other users' secure email accounts via crafted HTTP requests.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126162

XML Injection Vulnerability in FortiMail Allowing Remote Code Execution

A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow a remote unauthenticated attacker to execute unauthorized code or commands via a specially crafted request.

CVSS 3.1 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126161

Uncontrolled Resource Consumption in FortiMail Leading to Denial of Service

A uncontrolled resource consumption vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.6 may allow a remote unauthenticated attacker to cause a denial of service via repeated unauthenticated POST requests.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126163

Externally‑Controlled Format String Exploit in FortiMail Permitting Remote Code Execution via SMTP

A use of externally-controlled format string vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1 may allow a remote unauthenticated attacker to execute unauthorized code or commands via a specially crafted SMTP command.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126167

Command Injection in FortiMail Administrative Interface Enables Deletion of Tenant Users and Root Execution

A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.2, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated remote attacker with domain admin or admin privileges to delete users of other tenant domains on a paired FortiAuthenticator, execute arbitrary code as root or arbitrary CLI commands, and read or write arbitrary files as root via crafted HTTP requests to the administrative interface.

CVSS 3.1 · 7.2 High EPSS 1.5% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126168

Argument Injection in FortiMail Enables Remote Code Execution with Administrative Privileges

A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.2, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated remote attacker with domain admin or admin privileges to delete users of other tenant domains on a paired FortiAuthenticator, execute arbitrary code as root or arbitrary CLI commands, and read or write arbitrary files as root via crafted HTTP requests to the administrative interface.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126169

FortiMail Command Injection Allows Deletion of Users and Arbitrary Code Execution

A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.2, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated remote attacker with domain admin or admin privileges to delete users of other tenant domains on a paired FortiAuthenticator, execute arbitrary code as root or arbitrary CLI commands, and read or write arbitrary files as root via crafted HTTP requests to the administrative interface.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126145

OS Command Injection in FortiMail Enabling Arbitrary Root Execution

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated administrator with system-time read-write access to execute unauthorized code or commands as root.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126146

OS Command Injection via Archive Account Configuration in FortiMail and FortiRecorder

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.4, FortiMail 7.4.0 through 7.4.6, FortiMail 7.2.0 through 7.2.9, FortiRecorder 7.6.0, FortiRecorder 7.2.0 through 7.2.11, FortiRecorder 7.0.0 through 7.0.6 may allow an authenticated privileged attacker to execute unauthorized code or commands via a specifically crafted archive account configuration.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail Fortirecorder
CVE-2026-126149

Integer Overflow Leading to Remote Daemon Crash in FortiMail

A integer overflow or wraparound vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow a remote unauthenticated attacker to crash the daemon.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126158

OS Command Injection Exploitable by Authenticated Admin in FortiMail 8.0.x

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1 may allow an authenticated administrator to execute unauthorized code or commands as root via specially crafted HTTP requests.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126153

Path Traversal Allowing Unauthenticated Command Execution in FortiMail

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to execute unauthorized commands via crafted requests.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126151

Authentication Algorithm Vulnerability Allowing Unauthenticated Remote Account Takeover

A incorrect implementation of authentication algorithm vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to gain elevation of privilege (account takeover) via a crafted request.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126152

Authorization Bypass Allowing Root Directory Deletion and Cross-Tenant Data Access in FortiMail

A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated remote attacker to delete arbitrary directories as root, or to access or delete other users' calendar and mailbox data across tenant domains, via crafted HTTP requests to the webmail and administrative interfaces.

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail
CVE-2026-126156

Authorization Bypass via User-Controlled Key in FortiMail

A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to take over an arbitrary IBE recipient account via crafted HTTP requests.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Fortinet
Products
Fortimail