{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/cve-2026-126162/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.7,"id":"CVE-2026-126162"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FortiMail (8.0.0 through 8.0.1)","FortiMail (7.6.0 through 7.6.6)"],"_cs_severities":["high"],"_cs_tags":["cve-2026-126162","xml-injection","rce"],"_cs_type":"advisory","_cs_vendors":["Fortinet"],"content_html":"\u003cp\u003eFortinet FortiMail versions 8.0.0 through 8.0.1 and 7.6.0 through 7.6.6 contain an XML injection vulnerability, identified as blind XPath injection (CVE-2026-126162). This vulnerability allows a remote, unauthenticated attacker to manipulate XPath expressions through a specially crafted request, potentially leading to unauthorized command or code execution.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an unauthenticated remote attacker to execute unauthorized code or commands on the affected FortiMail device. The CVSS 3.1 base score for this vulnerability is 8.7.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eMonitor Fortinet security bulletins for firmware patches addressing CVE-2026-126162. Organizations currently running FortiMail versions 8.0.0-8.0.1 or 7.6.0-7.6.6 should inventory these assets and prepare for immediate patching upon release of the fix.\u003c/p\u003e\n","date_modified":"2026-11-12T00:14:37Z","date_published":"2026-11-12T00:14:37Z","id":"https://feed.craftedsignal.io/briefs/2026-11-fortimail-xml-injection-cve-2026-126162/","summary":"Fortinet FortiMail versions 8.0.0 through 8.0.1 and 7.6.0 through 7.6.6 are vulnerable to XML injection, which can lead to remote unauthenticated code execution via specially crafted requests.","title":"Fortinet FortiMail: XML and Blind XPath Injection (CVE-2026-126162)","url":"https://feed.craftedsignal.io/briefs/2026-11-fortimail-xml-injection-cve-2026-126162/"}],"language":"en","title":"CraftedSignal Threat Feed - Cve-2026-126162","version":"https://jsonfeed.org/version/1.1"}