CVE-2026-126162
HIGH
NVD
CVSS Score
8.7
Severity
HIGH
Published
Nov 11, 2026
Vendor
unknown
Description
A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow a remote unauthenticated attacker to execute unauthorized code or commands via a specially crafted request.