Threats tagged 'ghsa-gg72-56wf-8rvm'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.1	CVE-2026-126150A weak password recovery mechanism for forgotten password vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 Critical9.12026-11-12GCVE DatabaseCVE-2026-126150 A vulnerability in Fortinet FortiMail versions 8.0.0, 7.6.0 through 7.6.5, 7.4.0 through 7.4.7, and 7.2.0 through 7.2.9 allows an unauthenticated attacker to reset the password of any IBE webmail user. This is due to a weak password recovery mechanism that can be exploited via specially crafted HTTP requests, potentially leading to account takeover. Report on CVE-2026-126150 Vulnerability CWE-640 #ghsa-gg72-56wf-8rvm	GCVE Database	2026-11-12

Page 1 of 1