FortiMail (7.4.0 Through 7.4.6) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/fortimail-7.4.0-through-7.4.6/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 12 Nov 2026 00:12:17 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgFortinet FortiMail: Uncontrolled resource consumption (CVE-2026-126161)https://feed.craftedsignal.io/briefs/2026-11-fortimail-dos-cve-2026-126161/Thu, 12 Nov 2026 00:12:17 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-fortimail-dos-cve-2026-126161/An uncontrolled resource consumption vulnerability in Fortinet FortiMail allows remote, unauthenticated attackers to trigger a denial of service condition by sending repeated malicious POST requests to the device.Fortinet FortiMail is affected by an uncontrolled resource consumption vulnerability (CVE-2026-126161). The vulnerability allows a remote, unauthenticated attacker to cause a denial of service (DoS) condition on the affected device by sending repeated unauthenticated POST requests. The vulnerability is assigned a CVSS v3.1 base score of 7.5.

Impact

Successful exploitation results in a denial of service, rendering the affected FortiMail appliance unavailable to legitimate traffic and services.

Recommendation

Inventory all instances of Fortinet FortiMail running versions 8.0.0-8.0.1, 7.6.0-7.6.6, and 7.4.0-7.4.6. Monitor for vendor-provided security patches for these versions and apply them immediately upon release. Implement rate limiting on inbound POST requests to the FortiMail management and email gateway interfaces to mitigate the impact of this vulnerability until a patch is applied.

]]>lowadvisorydenial-of-servicenetwork-securityvulnerability