Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:53:49 +0000 certfr-2026-avi-1257 — Une vulnérabilité a été découverte dans Fortinet FortiMail. Elle permet à un attaquant de provoquer une exécution de co… https://vulnerability.circl.lu/vuln/certfr-2026-avi-1257 certfr-2026-avi-1257 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1257 fkie_cve-2026-104286 https://vulnerability.circl.lu/vuln/fkie_cve-2026-104286 <p>An improper limitation of a pathname to a restricted directory (&#39;path traversal&#39;) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.</p> <p>An improper limitation of a pathname to a restricted directory (&#39;path traversal&#39;) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-104286 GHSA-6gxc-3vv7-7w24 https://vulnerability.circl.lu/vuln/ghsa-6gxc-3vv7-7w24 <p>An improper limitation of a pathname to a restricted directory (&#39;path traversal&#39;) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.</p> <p>An improper limitation of a pathname to a restricted directory (&#39;path traversal&#39;) vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.</p> https://vulnerability.circl.lu/vuln/ghsa-6gxc-3vv7-7w24 NCSC-2026-0398 — Kwetsbaarheid verholpen in Fortinet FortiMail https://vulnerability.circl.lu/vuln/ncsc-2026-0398 NCSC-2026-0398 https://vulnerability.circl.lu/vuln/ncsc-2026-0398