https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 14:04:42 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-126162 <p>A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow a remote unauthenticated attacker to execute unauthorized code or commands via a specially crafted request.</p> <p>A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow a remote unauthenticated attacker to execute unauthorized code or commands via a specially crafted request.</p> https://db.gcve.eu/vuln/fkie_cve-2026-126162 https://db.gcve.eu/vuln/ghsa-r373-gqr3-3r97 <p>A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow a remote unauthenticated attacker to execute unauthorized code or commands via a specially crafted request.</p> <p>A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6 may allow a remote unauthenticated attacker to execute unauthorized code or commands via a specially crafted request.</p> https://db.gcve.eu/vuln/ghsa-r373-gqr3-3r97 https://db.gcve.eu/vuln/ncsc-2026-0487 NCSC-2026-0487 https://db.gcve.eu/vuln/ncsc-2026-0487 https://db.gcve.eu/vuln/wid-sec-w-2026-4519 <p>Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiOS, Fortinet FortiManager, Fortinet FortiMail, Fortinet FortiAnalyzer und Fortinet FortiAuthenticator ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsmechanismen zu umgehen, seine Berechtigungen zu erweitern, um Daten zu manipulieren und um einen Denial of Service herbezizuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiOS, Fortinet FortiManager, Fortinet FortiMail, Fortinet FortiAnalyzer und Fortinet FortiAuthenticator ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsmechanismen zu umgehen, seine Berechtigungen zu erweitern, um Daten zu manipulieren und um einen Denial of Service herbezizuführen.</p> https://db.gcve.eu/vuln/wid-sec-w-2026-4519