{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/fortimail-8.0.0-through-8.0.1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-126159"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FortiMail 8.0.0 through 8.0.1","FortiMail 7.6.0 through 7.6.6","FortiMail 7.4.0 through 7.4.8","FortiMail 7.2 all versions"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Fortinet"],"content_html":"\u003cp\u003eFortinet FortiMail contains an authorization bypass vulnerability (CVE-2026-126159) resulting from a user-controlled key. This allows an unauthenticated attacker to release or delete quarantined messages for arbitrary mailboxes by sending a crafted quarantine release request.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows unauthorized manipulation of quarantined email messages. The CVSS v3.1 base score is 7.5.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eReview environments for affected versions to determine upgrade requirements per official vendor guidance.\u003c/p\u003e\n","date_modified":"2026-11-12T00:11:58Z","date_published":"2026-11-12T00:11:58Z","id":"https://feed.craftedsignal.io/briefs/2026-11-fortimail-bypass-cve-2026-126159/","summary":"An authorization bypass vulnerability in Fortinet FortiMail allows an unauthenticated attacker to release or delete quarantined messages for arbitrary mailboxes via a crafted request.","title":"Fortinet FortiMail: Authorization bypass via quarantine request (CVE-2026-126159)","url":"https://feed.craftedsignal.io/briefs/2026-11-fortimail-bypass-cve-2026-126159/"},{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":9.1,"id":"CVE-2026-126156"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FortiMail 8.0.0 through 8.0.1","FortiMail 7.6.0 through 7.6.6","FortiMail 7.4.0 through 7.4.8","FortiMail 7.2 all versions"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Fortinet"],"content_html":"\u003cp\u003eFortinet FortiMail contains an authorization bypass vulnerability (CVE-2026-126156) stemming from a user-controlled key flaw. This vulnerability enables an unauthenticated remote attacker to gain control over an arbitrary Identity-Based Encryption (IBE) recipient account through specially crafted HTTP requests.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an unauthenticated attacker to take over arbitrary IBE recipient accounts. The vulnerability has a CVSS v3.1 base score of 9.1.\u003c/p\u003e\n","date_modified":"2026-11-12T00:11:29Z","date_published":"2026-11-12T00:11:29Z","id":"https://feed.craftedsignal.io/briefs/2026-11-fortimail-bypass-cve-2026-126156/","summary":"An unauthenticated remote attacker can bypass authorization in Fortinet FortiMail to take over an arbitrary Identity-Based Encryption (IBE) recipient account by sending crafted HTTP requests.","title":"Fortinet FortiMail: Authorization bypass via user-controlled key (CVE-2026-126156)","url":"https://feed.craftedsignal.io/briefs/2026-11-fortimail-bypass-cve-2026-126156/"},{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-126153"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FortiMail 8.0.0 through 8.0.1","FortiMail 7.6.0 through 7.6.6","FortiMail 7.4.0 through 7.4.8","FortiMail 7.2 all versions"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Fortinet"],"content_html":"\u003cp\u003eFortinet FortiMail versions 8.0.0 through 8.0.1, 7.6.0 through 7.6.6, 7.4.0 through 7.4.8, and all versions of 7.2 are affected by an improper limitation of a pathname to a restricted directory vulnerability, also known as path traversal. This flaw allows an unauthenticated attacker to execute unauthorized commands via crafted requests.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an unauthenticated attacker to execute unauthorized commands on the target appliance.\u003c/p\u003e\n","date_modified":"2026-11-12T00:11:02Z","date_published":"2026-11-12T00:11:02Z","id":"https://feed.craftedsignal.io/briefs/2026-11-fortinet-fortimail-path-traversal-cve-2026-126153/","summary":"CVE-2026-126153 is a path traversal vulnerability in multiple versions of Fortinet FortiMail that allows unauthenticated attackers to execute unauthorized commands via crafted requests.","title":"Fortinet FortiMail Path Traversal (CVE-2026-126153)","url":"https://feed.craftedsignal.io/briefs/2026-11-fortinet-fortimail-path-traversal-cve-2026-126153/"}],"language":"en","title":"CraftedSignal Threat Feed - FortiMail 8.0.0 Through 8.0.1","version":"https://jsonfeed.org/version/1.1"}