{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Fortinet FortiMail: important CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/fortinet--fortimail/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/fortinet--fortimail/important.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2025-57739/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2025-57739/",
   "title": "CVE-2025-57739 disclosed",
   "content_text": "An improper neutralization of special elements used in an SQL Command (\"SQL Injection\") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests.",
   "date_published": "2026-10-13T17:37:11Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-104286/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-104286/",
   "title": "CVE-2026-104286 disclosed [exploited]",
   "content_text": "An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.",
   "date_published": "2026-10-01T19:17:38Z"
  }
 ]
}