Description
A memory allocation with excessive size value vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow a remote unauthenticated attacker to cause a denial of service via a specially crafted attachment delivered over SMTP.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiMail | 7.6.0 ≤7.6.6 | — |
| Fortinet | FortiMail | 7.0.0 ≤7.0.9 | — |
| Fortinet | FortiMail | 8.0.0 ≤8.0.1 | — |
| Fortinet | FortiMail | 7.2.0 ≤7.2.9 | — |
| Fortinet | FortiMail | 7.4.0 ≤7.4.8 | — |
Advisories 2
- NCSC-2026-0487 Kwetsbaarheden verholpen in Fortinet FortiMail NCSC-NL (Netherlands) · Nov 12, 2026
- WID-SEC-2026-4489 Fortinet Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026