CVE WATCH / VULNERABILITY DETAIL
CVE-2026-126159
HIGHCVSS 7.5NVD feed
Published 11 November 2026 · tracked since 12 November 2026
Description
A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to release or delete quarantined messages for arbitrary mailboxes
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-126184 HIGH 8.2
- CVE-2026-126183 HIGH 8.7
- CVE-2026-126181 HIGH 8
- CVE-2026-126180 HIGH 8.4
- CVE-2026-126177 HIGH 8.1
- CVE-2026-126176 HIGH 8.1
- CVE-2026-126175 HIGH 8.8
- CVE-2026-126170 CRITICAL 9.8
- CVE-2026-126165 HIGH 7.5
- CVE-2026-126164 CRITICAL 9.4