Threats tagged 'ghsa-7cj3-hp24-24jf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.6	CVE-2026-126152A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail High7.62026-11-12GCVE DatabaseCVE-2026-126152 CVE-2026-126152 is an authorization bypass vulnerability affecting Fortinet FortiMail versions 7.2 all versions, 7.4.0 through 7.4.8, 7.6.0 through 7.6.6, and 8.0.0 through 8.0.1. It allows an authenticated remote attacker to delete arbitrary directories as root or access and delete other users' calendar and mailbox data across tenant domains via crafted HTTP requests to the webmail and administrative interfaces. Report on CVE-2026-126152 Vulnerability CWE-639 #ghsa-7cj3-hp24-24jf	GCVE Database	2026-11-12

Page 1 of 1