CVE-2021-32586

9.8 criticalEPSS 1.1%

Critical (9.8) in fortinet fortimail. EPSS 1.1% chance of exploitation in the next 30 days.

An improper input validation vulnerability in the web server CGI facilities of FortiMail before 7.0.1 may allow an unauthenticated attacker to alter the environment of the underlying script interpreter via specifically crafted HTTP requests.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2022-03-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortimail

References

https://fortiguard.com/psirt/FG-IR-21-008
https://fortiguard.com/psirt/FG-IR-21-008

Check your stack JSON