Skip to content

#ibe

3 articles

Security Alerts Nov 12, 2026

CVE-2026-126150: Weak Password Recovery in Fortinet FortiMail IBE

A weak password recovery mechanism in FortiMail 7.2–8.0.0 lets an unauthenticated attacker reset the password of any IBE webmail user and take over the account...

Security Alerts Nov 12, 2026

CVE-2026-126155: Incorrect Authorization in Fortinet FortiMail IBE

An incorrect authorization flaw in FortiMail 7.2–8.0.1 lets a remote unauthenticated attacker obtain any IBE recipient webmail session and read or send their mail...

Security Alerts Nov 12, 2026

CVE-2026-126156: Authorization Bypass in Fortinet FortiMail IBE

An authorization bypass in FortiMail 7.2–8.0.1 lets a remote unauthenticated attacker take over any IBE recipient account via crafted HTTP requests...