CVE-2026-126151

Name of the Vulnerable Software and Affected Versions FortiMail versions 8.0.0 through 8.0.1 FortiMail versions 7.6.0 through 7.6.6 FortiMail versions 7.4.0 through 7.4.8 FortiMail version 7.2 (all versions)

Description An incorrect implementation of the authentication algorithm allows an unauthenticated remote attacker to achieve elevation of privilege, potentially leading to account takeover, by sending a crafted request.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.