Fortinet Fortimail vulnerabilities

• fortinet fortimail A improper neutralization of special elements used in an sql command ('sql injection')... CVE-2026-126263 9.4 CriticalNovember 11, 2026
• fortinet fortimail A improper neutralization of argument delimiters in a command ('argument injection')... CVE-2026-126169 7.2 HighNovember 11, 2026
• fortinet fortimail A improper neutralization of argument delimiters in a command ('argument injection')... CVE-2026-126166 7.2 HighNovember 11, 2026
• fortinet fortimail A improper neutralization of argument delimiters in a command ('argument injection')... CVE-2026-126168 7.2 HighNovember 11, 2026
• fortinet fortimail A improper neutralization of special elements used in a command ('command injection')... CVE-2026-126167 7.2 HighNovember 11, 2026
• fortinet fortimail A improper neutralization of special elements used in an sql command ('sql injection')... CVE-2026-126164 9.4 CriticalNovember 11, 2026
• fortinet fortimail A use of externally-controlled format string vulnerability in Fortinet FortiMail 8.0.0 through 8... CVE-2026-126163 8.1 HighNovember 11, 2026
• fortinet fortimail A memory allocation with excessive size value vulnerability in Fortinet FortiMail 8.0.0 through 8... CVE-2026-126165 7.5 HighNovember 11, 2026
• fortinet fortimail A uncontrolled resource consumption vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1,... CVE-2026-126161 7.5 HighNovember 11, 2026
• fortinet fortimail A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0... CVE-2026-126162 8.7 HighNovember 11, 2026
• fortinet fortimail A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6... CVE-2026-126160 8.2 HighNovember 11, 2026
• fortinet fortimail A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0... CVE-2026-126159 7.5 HighNovember 11, 2026
• fortinet fortimail A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in... CVE-2026-126147 9.8 CriticalNovember 11, 2026
• fortinet fortimail A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0... CVE-2026-126156 9.1 CriticalNovember 11, 2026
• fortinet fortimail A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0... CVE-2026-126152 7.6 HighNovember 11, 2026
• fortinet fortimail A incorrect implementation of authentication algorithm vulnerability in Fortinet FortiMail 8.0.0... CVE-2026-126151 7.5 HighNovember 11, 2026
• fortinet fortimail A out-of-bounds write vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0... CVE-2026-126154 7.5 HighNovember 11, 2026
• fortinet fortimail A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in... CVE-2026-126153 7.5 HighNovember 11, 2026
• fortinet fortimail A improper neutralization of special elements used in an os command ('os command injection')... CVE-2026-126158 7.2 HighNovember 11, 2026
• fortinet fortimail A incorrect authorization vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6... CVE-2026-126155 9.1 CriticalNovember 11, 2026
• fortinet fortimail A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6... CVE-2026-126157 9.1 CriticalNovember 11, 2026
• fortinet fortimail A integer overflow or wraparound vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1,... CVE-2026-126149 7.5 HighNovember 11, 2026
• fortinet fortimail A weak password recovery mechanism for forgotten password vulnerability in Fortinet FortiMail 8.0... CVE-2026-126150 9.1 CriticalNovember 11, 2026
• fortinet fortimail A improper neutralization of special elements used in an os command ('os command injection')... CVE-2026-126148 9.8 CriticalNovember 11, 2026
• fortinet fortimail, fortirecorder +1 more A improper neutralization of special elements used in an os command ('os command injection')... CVE-2026-126146 7.2 HighNovember 11, 2026
• fortinet fortimail, fortirecorder, fortivoice +2 more A improper neutralization of special elements used in an os command ('os command injection')... CVE-2026-126144 8.8 HighNovember 11, 2026
• fortinet fortimail A improper neutralization of special elements used in an os command ('os command injection')... CVE-2026-126145 7.2 HighNovember 11, 2026
• fortinet fortimail An improper neutralization of special elements used in an SQL Command ("SQL Injection")... CVE-2025-57739 7.7 HighOctober 13, 2026
• fortinet fortimail An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability... CVE-2026-104286 In KEVPublic exploit 9.8 CriticalOctober 1, 2026
• fortinet fortimail An improper neutralization of special elements used in an SQL Command ("SQL Injection&")... CVE-2025-53681 6.3 MediumMay 12, 2026
• fortinet fortimail, fortirecorder, fortivoice +2 more A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet... CVE-2025-55717 3.8 LowMarch 10, 2026
• fortinet fortimail An improper neutralization of crlf sequences ('crlf injection') in Fortinet FortiMail 7.6.0... CVE-2025-54972 3.9 LowNovember 18, 2025
• fortinet fortimail, fortimanager, fortimanager cloud +9 more +11 more A insertion of sensitive information into sent data in Fortinet FortiManager Cloud 7.4.1 through... CVE-2024-47569 4.2 MediumOctober 14, 2025
• fortinet forticamera, fortimail, fortindr +3 more +5 more Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiMail version 7.6.0... CVE-2024-40588 4.2 MediumAugust 12, 2025
• fortinet forticamera, fortimail, fortindr +4 more +6 more A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiVoice versions 7.2.0, 7.0... CVE-2025-32756 In KEVPublic exploit EPSS 30.9% 9.6 CriticalMay 13, 2025
• fortinet fortimail, fortindr +1 more A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail... CVE-2023-33302 4.5 MediumMarch 31, 2025
• fortinet fortiddos, fortiddos-cm, fortimail +3 more +5 more An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE... CVE-2021-24008 5.0 MediumMarch 28, 2025
• fortinet fortimail A use of a cryptographically weak pseudo-random number generator vulnerability in the... CVE-2021-26091 6.9 MediumMarch 24, 2025
• fortinet fortimail An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS... CVE-2023-47539 9.0 CriticalMarch 18, 2025
• fortinet fortimail A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7... CVE-2024-46663 6.5 MediumMarch 11, 2025
• fortinet fortimanager, fortiadc, fortianalyzer +15 more +17 more A externally controlled reference to a resource in another sphere in Fortinet FortiManager before... CVE-2022-23439 4.1 MediumJanuary 22, 2025
• fortinet fortimail, fortirecorder +1 more An improper neutralization of special elements used in an os command ('os command injection') in... CVE-2024-56497 6.5 MediumJanuary 14, 2025
• fortinet fortimail, fortindr, fortirecorder +3 more +5 more A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x,... CVE-2022-27488 7.5 HighDecember 13, 2023
• fortinet fortimail An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2... CVE-2023-36633 5.3 MediumNovember 14, 2023
• fortinet fortimail An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail... CVE-2023-45582 5.3 MediumNovember 14, 2023
• fortinet fortimail An improper neutralization of input during web page generation vulnerability [CWE-79] in... CVE-2023-36637 3.4 LowOctober 10, 2023
• fortinet fortimail An incorrect authorization vulnerability [CWE-863] in FortiMail webmail version 7.2.0 through 7.2... CVE-2023-36556 8.6 HighOctober 10, 2023
• fortinet fortimail A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet... CVE-2022-29056 Public exploit 3.5 LowMarch 9, 2023
• fortinet fortimail An improper access control vulnerability [CWE-284] in FortiMail 7.2.0, 7.0.0 through 7.0.3, 6.4... CVE-2022-39945 5.4 MediumNovember 2, 2022
• fortinet fortimail, fortios, antivirus engine +1 more +3 more An insufficient verification of data authenticity vulnerability [CWE-345] in FortiClient,... CVE-2022-26122 4.7 MediumNovember 2, 2022
• Show olderLoading…