<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 12 Nov 2026 02:24:04 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-126152</title>
      <link>https://db.gcve.eu/vuln/cve-2026-126152</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Fortinet FortiMail&lt;/p&gt;
&lt;p&gt;A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated remote attacker to delete arbitrary directories as root, or to access or delete other users&amp;#39; calendar and mailbox data across tenant domains, via crafted HTTP requests to the webmail and administrative interfaces.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Fortinet FortiMail&lt;/p&gt;
&lt;p&gt;A authorization bypass through user-controlled key vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated remote attacker to delete arbitrary directories as root, or to access or delete other users&amp;#39; calendar and mailbox data across tenant domains, via crafted HTTP requests to the webmail and administrative interfaces.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2026-126152</guid>
    </item>
  </channel>
</rss>
