Hoch 7.6Software
CVE-2026-126152
Fortinet Produkte: Mehrere Schwachstellen
Fortinet FortiManager, Fortinet FortiOS, Fortinet FortiAnalyzer, Fortinet FortiMail, Fortinet FortiClient
A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated remote attacker to delete arbitrary directories as root, or to access or delete other users' calendar and mailbox data across tenant domains, via crafted HTTP requests to the webmail and administrative interfaces.
11. Nov 2026
Original bei CERT-Bund öffnen