FortiMail flaw lets attackers release or delete quarantined mail
Original title: Improper authentication in releasecontrol
An unauthenticated attacker can target arbitrary mailboxes through crafted quarantine release requests, scored CVSS 8.2.
Fortinet PSIRT revised FG-IR-26-212 on November 10, describing improper authentication in FortiMail. An unauthenticated attacker may escalate privileges and release or delete quarantined messages for arbitrary mailboxes using crafted quarantine release requests. The snippet does not list versions, a fix, or exploitation.
Unconfirmed: Affected versions, remediation, and exploitation status are not stated.
- CVSSv3 score is 8.2; the weakness is CWE-287.
- The issue is in FortiMail release control for quarantine.
- No authentication is required to send the crafted requests.
Impact: Release or delete quarantined mail for arbitrary mailboxes
| Product | Affected |
|---|---|
| Fortinet FortiMail | — |
From the original article
CVSSv3 Score: 8. 2 An Improper Authentication vulnerability [CWE-287] in FortiMail may allow an unauthenticated attacker to escalate privileges and release or delete quarantined messages for arbitrary mailboxes via a crafted quarantine release requests. Revised on 2026-11-10 00:00:00
fortiguard.fortinet.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.