{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/fortimail-7.4.0-through-7.4.6/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-126161"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FortiMail (8.0.0 through 8.0.1)","FortiMail (7.6.0 through 7.6.6)","FortiMail (7.4.0 through 7.4.6)"],"_cs_severities":["low"],"_cs_tags":["denial-of-service","network-security","vulnerability"],"_cs_type":"advisory","_cs_vendors":["Fortinet"],"content_html":"\u003cp\u003eFortinet FortiMail is affected by an uncontrolled resource consumption vulnerability (CVE-2026-126161). The vulnerability allows a remote, unauthenticated attacker to cause a denial of service (DoS) condition on the affected device by sending repeated unauthenticated POST requests. The vulnerability is assigned a CVSS v3.1 base score of 7.5.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in a denial of service, rendering the affected FortiMail appliance unavailable to legitimate traffic and services.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eInventory all instances of Fortinet FortiMail running versions 8.0.0-8.0.1, 7.6.0-7.6.6, and 7.4.0-7.4.6. Monitor for vendor-provided security patches for these versions and apply them immediately upon release. Implement rate limiting on inbound POST requests to the FortiMail management and email gateway interfaces to mitigate the impact of this vulnerability until a patch is applied.\u003c/p\u003e\n","date_modified":"2026-11-12T00:12:17Z","date_published":"2026-11-12T00:12:17Z","id":"https://feed.craftedsignal.io/briefs/2026-11-fortimail-dos-cve-2026-126161/","summary":"An uncontrolled resource consumption vulnerability in Fortinet FortiMail allows remote, unauthenticated attackers to trigger a denial of service condition by sending repeated malicious POST requests to the device.","title":"Fortinet FortiMail: Uncontrolled resource consumption (CVE-2026-126161)","url":"https://feed.craftedsignal.io/briefs/2026-11-fortimail-dos-cve-2026-126161/"}],"language":"en","title":"CraftedSignal Threat Feed - FortiMail (7.4.0 Through 7.4.6)","version":"https://jsonfeed.org/version/1.1"}