CVE-2026-126163

Name of the Vulnerable Software and Affected Versions Fortinet FortiMail versions 8.0.0 through 8.0.1

Description A format string vulnerability occurs when an application uses externally-controlled input as a format string, which can lead to memory corruption or unauthorized code execution. A remote unauthenticated attacker can exploit this by sending a specially crafted SMTP command to execute unauthorized code or commands.

Recommendations Update Fortinet FortiMail versions 8.0.0 through 8.0.1 to a newer version that contains a fix for this issue.