Threats tagged 'ghsa-jfjj-gm3c-hf2p'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.1	CVE-2026-126156A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail Critical9.12026-11-12GCVE DatabaseCVE-2026-126156 CVE-2026-126156 is a critical authorization bypass vulnerability affecting Fortinet FortiMail versions 7.2 (all versions), 7.4.0 through 7.4.8, 7.6.0 through 7.6.6, and 8.0.0 through 8.0.1. This flaw allows an unauthenticated remote attacker to take over an arbitrary IBE recipient account by sending crafted HTTP requests. The vulnerability has a high CVSS score of 9.1, indicating severe confidentiality and integrity impact without requiring user interaction or privileges. Report on CVE-2026-126156 Vulnerability CWE-639 #ghsa-jfjj-gm3c-hf2p	GCVE Database	2026-11-12

Page 1 of 1