Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Fortinet | FortiMail | unaffected |
|
|||||||||||||||
| Fortinet | FortiRecorder | unaffected |
|
|||||||||||||||
| Fortinet | FortiVoice | unaffected |
|
No data.
No data.
No data available yet.
Vendor Solution
Upgrade to upcoming FortiVoice version 8.0.2 or above Upgrade to upcoming FortiVoice version 7.4.3 or above Upgrade to upcoming FortiVoice version 7.2.6 or above Upgrade to upcoming FortiVoice version 7.0.9 or above Upgrade to upcoming FortiRecorder version 7.6.3 or above Upgrade to upcoming FortiRecorder version 7.2.13 or above Upgrade to upcoming FortiRecorder version 7.0.7 or above Upgrade to FortiMail version 8.0.2 or above Upgrade to FortiMail version 7.6.5 or above Upgrade to FortiMail version 7.4.7 or above
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-26-196 |
|
Wed, 11 Nov 2026 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.4, FortiMail 7.4.0 through 7.4.6, FortiMail 7.2 all versions, FortiRecorder 7.6.0 through 7.6.2, FortiRecorder 7.2.0 through 7.2.12, FortiRecorder 7.0.0 through 7.0.6, FortiVoice 8.0.0 through 8.0.1, FortiVoice 7.4.0 through 7.4.2, FortiVoice 7.2.0 through 7.2.5, FortiVoice 7.0.0 through 7.0.8 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. | |
| First Time appeared |
Fortinet
Fortinet fortimail Fortinet fortirecorder Fortinet fortivoice |
|
| Weaknesses | CWE-78 | |
| CPEs | cpe:2.3:a:fortinet:fortimail:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.2.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.2.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.2.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.2.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.2.5:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.2.6:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.2.7:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.2.8:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.2.9:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.4.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.4.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.4.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.4.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.4.5:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.4.6:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.6.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.6.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.6.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.6.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:7.6.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:8.0.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortimail:8.0.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.0.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.0.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.0.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.0.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.0.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.0.5:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.0.6:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.2.10:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.2.11:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.2.12:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.2.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.2.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.2.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.2.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.2.5:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.2.6:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.2.7:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.2.8:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.2.9:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.6.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.6.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortirecorder:7.6.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.0.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.0.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.0.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.0.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.0.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.0.5:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.0.6:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.0.7:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.0.8:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.2.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.2.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.2.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.2.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.2.5:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.4.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.4.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:7.4.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:8.0.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortivoice:8.0.1:*:*:*:*:*:*:* |
|
| Vendors & Products |
Fortinet
Fortinet fortimail Fortinet fortirecorder Fortinet fortivoice |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: fortinet
Published:
Updated: 2026-11-11T21:28:56.637Z
Reserved: 2026-11-10T20:03:17.179Z
Link: CVE-2026-126144
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-11-11T22:17:11.400
Modified: 2026-11-11T22:17:11.400
Link: CVE-2026-126144
Redhat
No data.
OpenCVE Enrichment
No data.
-
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')