{"id":"EM-20261112-TNRV","url":"https://cyber.eventmonitor.net/incident/EM-20261112-TNRV/critical-fortinet-fortimail-vulnerability-cve-2026-126147/","type":"cve","title":"Critical Fortinet FortiMail Vulnerability (CVE-2026-126147)","subtitle":"CVE-2026-126147","subject":"CVE-2026-126147","status":"Developing","severity":"critical","affected":[],"headline":null,"born":"2026-11-12T03:22:16.000Z","firstSignal":"2026-11-11T22:17:11.880Z","lastSignal":"2026-11-12T03:22:16.000Z","updated":"2026-11-12T15:50:47.989Z","revision":1,"life":[{"status":"Born","at":"2026-11-12T03:22:16.000Z","why":"second independent source: C31 Vulners (new public exploits)"},{"status":"Developing","at":"2026-11-12T03:22:16.000Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-11-11T22:17:11.880Z","what":"First signal: C6 NVD CVE API 2.0"},{"at":"2026-11-12T03:22:16.000Z","what":"Born: second source, C31 Vulners (new public exploits). Page EM-20261112-TNRV created."}],"stages":[{"name":"Disclosed","at":"2026-11-11T22:17:11.880Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-11T22:17:11.880Z","detail":"CVSS 9.8 · EPSS 0.6%"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":null,"detail":"None yet"},{"name":"Vendor Response","at":null,"detail":"None in sources yet"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-11-11T22:17:11.880Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":4,"title":"CVE-2026-126147 (CVSS 9.8)","text":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-126147"},{"at":"2026-11-12T03:22:16.000Z","source":"C31","sourceName":"Vulners (new public exploits)","role":"Research & News","severity":3,"title":"Public exploit: Exploit for CVE-2026-126147","text":"# CVE-2026-126147 — FortiMail management interface path traversal (arbitrary file write → command execution)\n\n| | |\n|---|---|\n| **CVE** | CVE-2026-126147 |\n| **Component** | Fortinet FortiMail — web management interface API |\n| **Advisory** | Fortinet PSIRT **FG-IR-26-199**, published 2026-11-10…","url":"https://github.com/googlesky/CVE-2026-126147"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-11T22:17:11.880","score":9.8,"severity":"CRITICAL","desc":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to execute unauthorized code or…","product":"","seen":1794443466720},"kev":null,"epss":{"epss":0.00632,"pct":0.50793,"at":1794498647989},"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}