---
id: "CVE-2026-126145"
page: "https://infrastack.ai/live/CVE-2026-126145"
kind: "vulnerability"
aliases: ["CVE-2026-126145"]
title: "Fortinet FortiMail: admin with system-time access can run commands as root"
severity: "high"
cvss: 7.2
epss: null
exploited: false
status: "open"
category: "vendor"
products: []
ecosystems: []
tags: ["email-gateway", "fortimail", "fortinet", "vendor"]
not_affected_if: ["no-system-time-admin", "unaffected-version"]
published_at: "2026-11-11T22:17:11+00:00"
first_seen_at: "2026-11-11T22:29:27+00:00"
updated_at: "2026-11-11T22:33:53+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-126145", "first_seen_at": "2026-11-11T22:29:27+00:00"}]
exploit_sources: []
---

# Fortinet FortiMail: admin with system-time access can run commands as root

Link for people: https://infrastack.ai/live/CVE-2026-126145 (this .md is for agents)

An authenticated FortiMail administrator who holds system-time read-write access can inject OS commands and run them as root. The flaw affects FortiMail 8.0.0 through 8.0.1, 7.6.0 through 7.6.6, 7.4.0 through 7.4.8, and all 7.2 versions.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the FortiMail version under System > Status or with `get system status` in the CLI, and compare it with the affected ranges.
- Review which administrator accounts hold system-time read-write access.

## Fix

- Fixed versions are not stated in the sources; check the Fortinet advisory for the fixed release in each branch.

## Timeline

- 2026-11-11T22:29:27+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-126145

## From the sources

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2 all versions may allow an authenticated administrator with system-time read-write access to execute unauthorized code or commands as root.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_