FortiMail 8.0.0 Through 8.0.2

An authenticated remote command injection vulnerability in Fortinet FortiMail allows administrators to execute arbitrary commands as root and manipulate user accounts on paired FortiAuthenticator devices.

An argument injection vulnerability in the administrative interface of Fortinet FortiMail allows authenticated remote attackers with admin privileges to achieve arbitrary code execution as root and perform unauthorized actions on paired FortiAuthenticator devices.