Skip to content
Threat Feed
Subscribe

Product

FortiMail (7.2.x)

2 briefs RSS
high advisory

Fortinet FortiMail: Improper authentication vulnerability (CVE-2026-126160)

An improper authentication vulnerability in Fortinet FortiMail allows unauthenticated attackers to perform unauthorized actions on quarantined messages by sending crafted requests.

FortiMail +3
1t 1c
critical advisory

Fortinet FortiMail: Incorrect authorization in IBE webmail (CVE-2026-126155)

An incorrect authorization vulnerability in Fortinet FortiMail allows an unauthenticated attacker to hijack Identity-Based Encryption (IBE) webmail sessions and access or send encrypted messages via crafted HTTP requests.

FortiMail +3
1c