CVE-2026-126162

Vendor

Fortinet

Product

FortiMail

CVSS v3.1

8.7 AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Weakness

CWE-91

Exposure class

Email

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 43
   CVE NVD 2h ago

   A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow a remote…

   A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow a remote unauthenticated attacker to execute unauthorized code or commands via a…

   CVSS 8.7 CVE-2026-126162 Fortinet