CVE-2026-126263

{
  "etk_id": "ETK-2026-4236",
  "cve_id": "CVE-2026-126263",
  "display_id": "CVE-2026-126263",
  "ghsa_id": "GHSA-h4rp-pvcj-94pr",
  "euvd_id": "EUVD-2026-123905",
  "status": "published",
  "anchor_state": "anchored",
  "title": "SQL injection in Fortinet FortiMail",
  "summary": "Fortinet FortiMail versions 8.0.0–8.0.1, 7.6.0–7.6.4, and 7.4.0–7.4.6 are affected by an SQL injection flaw. An authenticated attacker may use it to run unauthorized code or commands. Access to an authenticated FortiMail interface is required.",
  "mitigation": "Apply the vendor-provided update for this issue; the evidence does not identify a fixed version. Until updated, restrict administrative and authenticated interface access to trusted users and networks.",
  "vendor": "Fortinet",
  "product": "FortiMail",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 8.0.0, <= 8.0.1",
        ">= 7.6.0, <= 7.6.4",
        ">= 7.4.0, <= 7.4.6"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "FortiMail",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 9.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 11.934015866666666,
  "t0_at": "2026-11-11T21:31:52.954000+00:00",
  "signals": {
    "check": {
      "at": "2026-11-12T01:25:01.552249+00:00",
      "days": 0.1619050723263889,
      "is_lower_bound": false,
      "measured_at": "2026-11-11T21:31:52.954000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-11-11T21:31:52.954000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-11T21:31:52.954000+00:00",
      "url": "https://github.com/advisories/GHSA-h4rp-pvcj-94pr"
    }
  }
}