NewsFortinet PSIRT
Improper neutralization of special elements used in an os command
Teaser from the source
CVSSv3 Score: 9.8 An Improper neutralization of special elements used in a command ('command injection') [CWE-77] in FortiMail may allow an unauthenticated attacker to execute unauthorized code or commands via crafted HA join-request packets. Revised on 2026-11-10 00:00:00
This is the RSS-feed teaser. Read the full article at the original source.
Read at Fortinet PSIRTMore on neutralization
Other advisories
- HighCVE-2025-43874: Improper Neutralization of Special Elements used in an OS Command vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson C…
- MediumCVE-2026-9821IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when…
- CriticalCVE-2026-124415Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alejandro Alex Reservations alex-reservations allows SQ…
- HighCVE-2026-119517Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Catna – Woo Name Your Price and Offers catna…
- MediumCVE-2026-124418Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ahmad WP Job Portal wp-job-portal allows Stored XSS.Thi…
- HighCVE-2026-124265Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Software Newsletters newsletters-lite allows …
- MediumCVE-2026-124965Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPre…
- HighCVE-2026-124410Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpLingua Translation Service Translate and boost SEO &#…
Other news entries
- Improper neutralization of special elements used in a template engine iNewsFortinet PSIRT
- Improper neutralization of special elements used in an OS commandNewsFortinet PSIRT
- Improper neutralization of special elements used in an OS command in webmailNewsFortinet PSIRT
- Improper neutralization of special elements used in a template engine in fortisocNewsFortinet PSIRT
- Improper neutralization of special elements used in a commandNewsFortinet PSIRT
- Improper limitation of a pathname to a restricted directoryNewsFortinet PSIRT
- Improper neutralization of special elements used in an OS commandNewsFortinet PSIRT
- Improper neutralization of special elements used in an OS commandNewsFortinet PSIRT
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-200
ID