Threats tagged 'ghsa-6vc9-27jc-3gxg'

CVE-2026-126168 is a vulnerability in Fortinet FortiMail versions 7.2 all versions, 7.4.0 through 7.4.8, 7.6.0 through 7.6.6, and 8.0.0 through 8.0.2. It involves improper neutralization of argument delimiters in commands, allowing an authenticated attacker with domain admin or admin privileges to perform unauthorized actions such as deleting users on a paired FortiAuthenticator, executing arbitrary code as root, and reading or writing arbitrary files via crafted HTTP requests to the administrative interface.