Skip to content

#authorization-bypass

1 article

Security Alerts Nov 12, 2026

CVE-2026-126155: Incorrect Authorization in Fortinet FortiMail IBE

An incorrect authorization flaw in FortiMail 7.2–8.0.1 lets a remote unauthenticated attacker obtain any IBE recipient webmail session and read or send their mail...