Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.2 HIGH
CVE-2026-126167 — Fortinet FortiMail Command Injection Vulnerability

A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.2, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7…

fortimail | Remote | Injection
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.0 HIGH
CVE-2026-126181 — Fortinet FortiManager Hard-Coded Credentials Vulnerability

A use of hard-coded credentials vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2 all versions may allo…

Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
9.4 CRITICAL
CVE-2026-126164 — Fortinet FortiMail SQL Injection Vulnerability

A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through …

fortimail | Remote | Injection
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.1 HIGH
CVE-2026-126163 — Fortinet FortiMail Format String Vulnerability

A use of externally-controlled format string vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1 may allow a remote unauthenticated attacker to execute unauthorized code or commands via a special…

fortimail | Remote | Injection
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.5 HIGH
CVE-2026-126165 — Fortinet FortiMail Memory Allocation Denial of Service Vulnerability

A memory allocation with excessive size value vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may all…

fortimail | Remote | Memory Corruption
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.5 HIGH
CVE-2026-126161 — Fortinet FortiMail Uncontrolled Resource Consumption Denial of Service

A uncontrolled resource consumption vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.6 may allow a remote unauthenticated attacker t…

fortimail | Remote | Denial of Service
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.7 HIGH
CVE-2026-126162 — Fortinet FortiMail XPath Injection Vulnerability

A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow a remote unauthenticated attacker to execute unauthorized …

fortimail | Remote | Injection
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
8.2 HIGH
CVE-2026-126160 — Fortinet FortiMail Improper Authentication Privilege Escalation Vulnerability

A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticate…

fortimail | Remote | Authentication
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.5 HIGH
CVE-2026-126159 — Fortinet FortiMail Authorization Bypass Vulnerability

A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions ma…

fortimail | Remote | Authorization
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
9.8 CRITICAL
CVE-2026-126147 — Fortinet FortiMail Path Traversal Vulnerability

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8,…

fortimail | Remote | Path Traversal
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
9.1 CRITICAL
CVE-2026-126156 — Fortinet FortiMail Authorization Bypass Vulnerability

A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions ma…

fortimail | Remote | Authorization
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.6 HIGH
CVE-2026-126152 — Fortinet FortiMail Authorization Bypass Vulnerability

A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions ma…

fortimail | Remote | Authorization
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.5 HIGH
CVE-2026-126151 — Fortinet FortiMail Authentication Bypass Vulnerability

A incorrect implementation of authentication algorithm vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all version…

fortimail | Remote | Authentication
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.5 HIGH
CVE-2026-126154 — Fortinet FortiMail Out-of-Bounds Write Vulnerability

A out-of-bounds write vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow a remote unauthentica…

fortimail | Remote | Memory Corruption
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.5 HIGH
CVE-2026-126153 — Fortinet FortiMail Path Traversal Vulnerability

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8,…

fortimail | Remote | Path Traversal
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.2 HIGH
CVE-2026-126158 — Fortinet FortiMail OS Command Injection

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1 may allow an authenticated administrator to execut…

fortimail | Remote | Injection
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
9.1 CRITICAL
CVE-2026-126155 — Fortinet FortiMail Improper Authorization Vulnerability

A incorrect authorization vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticate…

fortimail | Remote | Authorization
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
9.1 CRITICAL
CVE-2026-126157 — Fortinet FortiMail Improper Authentication Vulnerability

A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticate…

fortimail | Remote | Authentication
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
7.5 HIGH
CVE-2026-126149 — Fortinet FortiMail Integer Overflow Vulnerability

A integer overflow or wraparound vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow a remote u…

fortimail | Remote | Denial of Service
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
9.1 CRITICAL
CVE-2026-126150 — Fortinet FortiMail Password Recovery Authentication Bypass

A weak password recovery mechanism for forgotten password vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 through 7.6.5, FortiMail 7.4.0 through 7.4.7, FortiMail 7.2.0 through 7.2.9 may al…

fortimail | Remote | Authentication
Nov 11, 2026 Nov 11, 2026
Nov 11, 2026
Nov 11, 2026
Showing 20 of 18902 Results