HIGHCVSS v3.1 7.2Vulnerability
CVE-2026-126145
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated administrator with system-time read-write access to execute unauthorized code or commands as root.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-11T23:49:45.533241+00:00
- Cvss severity
- HIGH
- Cvss score
- 7.2
- Retrieved at
- 2026-11-11T23:50:18+00:00
- Score
- 7.2
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-126145
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- First seen by Signal
- 2026-11-11T23:46:41+00:00
- Name
- CVE-2026-126145
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Published at
- 2026-11-11T22:17:11.580
- Last modified
- 2026-11-11T22:17:11.580
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph