Threats tagged 'ghsa-gg4w-pfwx-3x73'

CVE-2026-126146 is an OS command injection vulnerability affecting multiple versions of Fortinet FortiMail and FortiRecorder. It allows an authenticated privileged attacker to execute unauthorized commands via a specially crafted archive account configuration. The vulnerability impacts FortiMail versions 7.2.0 through 7.2.9, 7.4.0 through 7.4.6, 7.6.0 through 7.6.4, and 8.0.0 through 8.0.1, as well as FortiRecorder versions 7.0.0 through 7.0.6, 7.2.0 through 7.2.11, and 7.6.0. The CVSS v3.1 score is 7.2, indicating a high severity. No patch or remediation information is provided in the data.