Skip to content

#account-takeover

2 articles

Security Alerts Nov 12, 2026

CVE-2026-126150: Weak Password Recovery in Fortinet FortiMail IBE

A weak password recovery mechanism in FortiMail 7.2–8.0.0 lets an unauthenticated attacker reset the password of any IBE webmail user and take over the account...

Security Alerts Nov 12, 2026

CVE-2026-126156: Authorization Bypass in Fortinet FortiMail IBE

An authorization bypass in FortiMail 7.2–8.0.1 lets a remote unauthenticated attacker take over any IBE recipient account via crafted HTTP requests...