{"affected":[{"defaultStatus":"unaffected","product":"FortiMail","source":"CNA: fortinet","vendor":"Fortinet","versions":[{"lessThanOrEqual":"8.0.1","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThanOrEqual":"7.6.6","status":"affected","version":"7.6.0","versionType":"semver"},{"lessThanOrEqual":"7.4.8","status":"affected","version":"7.4.0","versionType":"semver"},{"lessThanOrEqual":"7.2.9","status":"affected","version":"7.2.0","versionType":"semver"}]}],"cveId":"CVE-2026-126159","cwes":["CWE-639"],"description":"A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an unauthenticated attacker to release or delete quarantined messages for arbitrary mailboxes via a crafted quarantine release request.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"CNA: fortinet","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C","version":"3.1"}],"modifiedAt":1794432557990,"publishedAt":1794432557990,"references":[{"source":"CNA: fortinet","tags":[],"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-211"}],"remediation":[{"kind":"fix","source":"CNA: fortinet","text":"Upgrade to FortiMail version 8.0.2 or above\nUpgrade to FortiMail version 7.6.7 or above\nUpgrade to FortiMail version 7.4.9 or above"}],"revision":"b2f355542c667a54f9dc47ff68d4aea1111465f5affd76654b911ad5bb5c6be1","sources":[{"modifiedAt":1794432557990,"name":"CNA: fortinet","retrievedAt":1794434951587,"url":"https://www.cve.org/CVERecord?id=CVE-2026-126159"}],"ssvc":null,"status":"published","title":"CVE-2026-126159","updatedAt":1794434951587}