CVE-2026-126144

Name of the Vulnerable Software and Affected Versions FortiMail versions 8.0.0 through 8.0.1 FortiMail versions 7.6.0 through 7.6.4 FortiMail versions 7.4.0 through 7.4.6 FortiMail versions 7.2.x FortiRecorder versions 7.6.0 through 7.6.2 FortiRecorder versions 7.2.0 through 7.2.12 FortiRecorder versions 7.0.0 through 7.0.6 FortiVoice versions 8.0.0 through 8.0.1 FortiVoice versions 7.4.0 through 7.4.2 FortiVoice versions 7.2.0 through 7.2.5 FortiVoice versions 7.0.0 through 7.0.8

Description An OS command injection issue exists where improper neutralization of special elements used in an OS command allows an authenticated attacker to execute unauthorized code or system commands remotely via specifically crafted HTTP requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.