HIGHCVSS v3.1 8.2Vulnerability
CVE-2026-126160
A improper authentication vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to escalate privileges and release or delete quarantined messages for arbitrary mailboxes via a crafted quarantine release requests.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-11T23:49:45.533241+00:00
- Cvss severity
- HIGH
- Cvss score
- 8.2
- Retrieved at
- 2026-11-11T23:50:18+00:00
- Score
- 8.2
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-126160
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
- First seen by Signal
- 2026-11-11T23:46:41+00:00
- Name
- CVE-2026-126160
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
- Published at
- 2026-11-11T22:17:13.990
- Last modified
- 2026-11-11T22:17:13.990
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph