CVE-2026-126151
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Nov 11, 2026
Vendor
unknown
Description
A incorrect implementation of authentication algorithm vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated remote attacker to gain elevation of privilege (account takeover) via a crafted request.