FO
Product
FortiMail
On CISA KEVExploited in the wild
48
CVEs
2
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 8High 15Medium 22Low 0
Watch
Add FortiMail to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-104286 In wildKEV | 9.8 | Oct 1 | Fortinet FortiMail Path Traversal Vulnerability Affected: 8.0.0; 7.6.0 through 7.6.5; 7.4.0 through 7.4.6; 7.2.0 through 7.2.9; 7.0.0 through 7.0.9 |
| CVE-2025-32756 In wildKEV | 9.8 | May 13 | Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability Affected: 7.6.0 through 7.6.2; 7.4.0 through 7.4.4; 7.2.0 through 7.2.7; 7.0.0 through 7.0.8 |
| CVE-2023-47539 | 9.8 | Mar 18 | An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remote_wildcard enabled may allow a remote unauthenticated attacker… Affected: 7.4.0 |
| CVE-2021-32586 | 9.8 | Mar 1 | An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the… Affected: through 5.4.12; 6.0.0 before 6.0.12; 6.2.0 before 6.2.8; 6.4.0 before 6.4.6; 7.0.0 |
| CVE-2021-36166 | 9.8 | Mar 1 | An improper authentication vulnerability in FortiMail before 7.0.1 may allow a remote attacker to efficiently guess one administrative account's authentication token by means of… Affected: through 5.4.12; 6.0.0 before 6.0.12; 6.2.0 before 6.2.8; 6.4.0 before 6.4.6; 7.0.0 |
| CVE-2021-24020 | 9.8 | Jul 9 | A missing cryptographic step in the implementation of the hash digest algorithm in FortiMail 6.4.0 through 6.4.4, and 6.2.0 through 6.2.7 may allow an unauthenticated attacker to… Affected: 6.2.0 through 6.2.7; 6.4.0 before 6.4.5 |
| CVE-2021-24007 | 9.8 | Jul 9 | Multiple improper neutralization of special elements of SQL commands vulnerabilities in FortiMail before 6.4.4 may allow a non-authenticated attacker to execute unauthorized code… Affected: through 5.4.12; 5.6.1 before 6.0.11; 6.2.0 before 6.2.7; 6.4.0 before 6.4.4 |
| CVE-2020-9294 | 9.8 | Apr 27 | An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0 and 6.0.1 may allow a remote unauthenticated attacker to… Affected: through 5.4.10; 6.0.0 through 6.0.7; 6.2.0 through 6.2.2 |
Showing 8