HIGHCVSS 7.50% EPSS
A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to release or delete quarantined messages for arbitrary mailboxes via a crafted quarantine release request.
Published 2026-11-11 · last modified 2026-11-12
| Vendor | Product |
|---|---|
| fortinet | fortimail |
Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.