#ha
2 articles
Security Alerts Nov 12, 2026
CVE-2026-126148: OS Command Injection in Fortinet FortiMail HA
An OS command injection in FortiMail 7.6.0–7.6.6 and 8.0.0–8.0.1 lets an unauthenticated attacker execute code via crafted HA join-request packets...
Security Alerts Nov 12, 2026
CVE-2026-126259: Missing Authentication in Fortinet FortiOS HA
Missing authentication in FortiOS 7.2–8.0.0 lets an attacker execute commands as super admin via HA packets when FGSP with standalone-config-sync or autoscale is enabled...