CVE-2026-126155

An incorrect authorization vulnerability [CWE-863] exists in Fortinet FortiMail affecting versions 8.0.0 through 8.0.1 , 7.6.0 through 7.6.6 , 7.4.0 through 7.4.8 , and all versions of 7.2 . This flaw allows an unauthenticated remote attacker to craft HTTP requests to obtain an authenticated IBE ...

Incorrect authorization

An Incorrect Authorization vulnerability CWE-863 in FortiMail may allow an unauthenticated remote attacker to obtain an authenticated IBE webmail session as any IBE recipient and read or send their encrypted mail via crafted HTTP requests...