HIGHCVSS 8.20% EPSS
A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to escalate privileges and release or delete quarantined messages for arbitrary mailboxes via a crafted quarantine release requests.
Published 2026-11-11 · last modified 2026-11-14
| Vendor | Product |
|---|---|
| fortinet | fortimail |
Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.