FortiMail 7.2 vulnerabilities
3 advisories affect Fortinet FortiMail 7.2, 2 already exploited by attackers. Latest: October 13, 2026.
Running FortiMail 7.2 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on FortiMail 7.2 alerts
Turn on FortiMail 7.2 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Fortinet: SQL command injection in webmail FG-IR-26-184 · October 13, 2026 | High 7.7 | from 7.2.0 to 7.2.8 Fixed in 7.2.9 |
| Fortinet FortiMail Path Traversal Vulnerability CVE-2026-104286 · October 1, 2026 | Critical 9.8 Exploited | from 7.2.0 to 7.2.9 |
| Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability CVE-2025-32756 · May 14, 2025 | Critical 9.8 Exploited | from 7.2.0 to 7.2.7 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.