CVE-2021-26090

—

CVSS 3.1

7.5 high

EPSS

1%p69

Published

Jul 12, 2021 (Jul 12, 2021)

Modified

Jun 17, 2026

Description

A missing release of memory after its effective lifetime vulnerability in the Webmail of FortiMail 6.4.0 through 6.4.4 and 6.2.0 through 6.2.6 may allow an unauthenticated remote attacker to exhaust available memory via specifically crafted login requests.

Vendors: fortinet
Products: fortimail
Weakness: CWE-401
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.