CVE-2026-126157

Name of the Vulnerable Software and Affected Versions FortiMail versions 8.0.0 through 8.0.1 FortiMail versions 7.6.0 through 7.6.6 FortiMail versions 7.4.0 through 7.4.8 FortiMail version 7.2

Description An improper authentication issue allows an unauthenticated remote attacker to gain unauthorized access to the secure email accounts of other users by sending crafted HTTP requests.

Recommendations Update FortiMail versions 8.0.0 through 8.0.1 to version 8.0.2. At the moment, there is no information about a newer version that contains a fix for this vulnerability for versions 7.6.x, 7.4.x, and 7.2.