CVE-2026-126164

Name of the Vulnerable Software and Affected Versions FortiMail versions 8.0.0 through 8.0.1 FortiMail versions 7.6.0 through 7.6.6 FortiMail versions 7.4.0 through 7.4.8 FortiMail version 7.2 (all versions)

Description An improper neutralization of special elements used in an SQL command, known as SQL injection, allows an unauthenticated attacker to execute unauthorized code or commands via crafted requests. SQL injection is a technique where malicious SQL statements are inserted into entry fields for execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.