Skip to content
Threat Feed
Subscribe

Product

FortiMail 8.0.0 Through 8.0.1

3 briefs RSS
high advisory

Fortinet FortiMail: Authorization bypass via quarantine request (CVE-2026-126159)

An authorization bypass vulnerability in Fortinet FortiMail allows an unauthenticated attacker to release or delete quarantined messages for arbitrary mailboxes via a crafted request.

FortiMail 8.0.0 through 8.0.1 +3
1c
critical advisory

Fortinet FortiMail: Authorization bypass via user-controlled key (CVE-2026-126156)

An unauthenticated remote attacker can bypass authorization in Fortinet FortiMail to take over an arbitrary Identity-Based Encryption (IBE) recipient account by sending crafted HTTP requests.

FortiMail 8.0.0 through 8.0.1 +3
1c
high advisory

Fortinet FortiMail Path Traversal (CVE-2026-126153)

CVE-2026-126153 is a path traversal vulnerability in multiple versions of Fortinet FortiMail that allows unauthenticated attackers to execute unauthorized commands via crafted requests.

FortiMail 8.0.0 through 8.0.1 +3
1c