HIGHCVSS 8.71% EPSS
A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow a remote unauthenticated attacker to execute unauthorized code or commands via a specially crafted request.
Published 2026-11-11 · last modified 2026-11-14
| Vendor | Product |
|---|---|
| fortinet | fortimail |
Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.