---
title: "Discussion on \"FortiMail CVE-2026-126147: Pre-Auth Path Traversal RCE\" | Hashnode"
description: "Discussion on \"FortiMail CVE-2026-126147: Pre-Auth Path Traversal RCE\". FortiMail CVE-2026-126147 (CVSS 9.8) lets unauthenticated attackers run code. Fixed in 8.0.2, 7.6.7, 7.4.9. FortiMail 7.2 gets no patch."
url: "https://hashnode.com/posts/alert-fortimail-cve-2026-126147-path-traversal-rce/6af5a14364fa389622b798f5"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [FortiMail CVE-2026-126147: Pre-Auth Path Traversal RCE](https://404-founders.com/blog/alert-fortimail-cve-2026-126147-path-traversal-rce?utm_source=hashnode&utm_medium=feed)

FortiMail CVE-2026-126147 (CVSS 9.8) lets unauthenticated attackers run code. Fixed in 8.0.2, 7.6.7, 7.4.9. FortiMail 7.2 gets no patch.

5h ago · 10 min read · 404-founders.com  
Read the article

-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#vulnerability](https://hashnode.com/tag/vulnerability)
-   [#fortinet](https://hashnode.com/tag/fortinet)
-   [#fortimail](https://hashnode.com/tag/fortimail)

## Written by

[404 Founders](https://hashnode.com/@404-founders)

@404-founders · Bosnia and Herzegovina, Estonia

  
[View profile](https://hashnode.com/@404-founders)

Error-proof Cyber Solutions

Securing the digital frontier. Error-proof cyber solutions.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.