Vulnerabilidad · Publicado 13/10/2026 · Actualizado 14/10/2026
Fortinet PSIRT publica advisory de seguridad: SQL command injection in webmail. Tipo: Inyección SQL. Producto afectado: Fortimail.
CVSSv3 Score: 7.7 An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] in FortiMail webmail may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. Revised on 2026-10-13 00:00:00
Advisory publicado por Fortinet Product Security Incident Response Team (PSIRT).