NewsFortinet PSIRT

    SQL command injection in webmail

    CVSSv3 Score: 7.7 An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] in FortiMail webmail may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. Revised on 2026-10-13 00:00:00

    More on injection

    Other advisories

    Other news entries

    Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-184

    ID