CVE-2026-126163

HIGHCVSS 8.10% EPSS

A use of externally-controlled format string vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1 may allow a remote unauthenticated attacker to execute unauthorized code or commands via a specially crafted SMTP command.

Published 2026-11-11 · last modified 2026-11-14

Affected products

VendorProduct
fortinetfortimail

Full record at NVD ↗

← Get alerted the moment a CVE hits your gear — subscribe free

Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.