CVE WATCH / VULNERABILITY DETAIL
CVE-2026-126153
HIGHCVSS 7.5NVD feed
Published 11 November 2026 · tracked since 12 November 2026
Description
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to execute unauthorized commands vi
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-126184 HIGH 8.2
- CVE-2026-126183 HIGH 8.7
- CVE-2026-126181 HIGH 8
- CVE-2026-126180 HIGH 8.4
- CVE-2026-126177 HIGH 8.1
- CVE-2026-126176 HIGH 8.1
- CVE-2026-126175 HIGH 8.8
- CVE-2026-126170 CRITICAL 9.8
- CVE-2026-126165 HIGH 7.5
- CVE-2026-126164 CRITICAL 9.4