{"api_version":"v1","generated_at":"2026-10-09T09:05:00+00:00","product":{"cve_count":14,"evidence_gap_note":"This CVE identity is linked to an existing Lifecycle product history.","id":"security:cve-fortinet-fortimail-c283a3b639dd","lifecycle_state":"covered","linked_lifecycle_url":"https://lifecycle.blacktree.nl/targets/fortimail","name":"FortiMail","next_cursor":null,"observations":[{"affected":"FortiMail: 8.0.0, 7.6.0 \u2264 7.6.5, 7.4.0 \u2264 7.4.6, 7.2.0 \u2264 7.2.9, 7.0.0 \u2264 7.0.9","affected_versions_present":true,"cve_id":"CVE-2026-104286","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-104286","fixed":"Upgrade to upcoming FortiMail version 8.0.1 or above; Upgrade to upcoming FortiMail version 7.6.6 or above; Upgrade to upcoming FortiMail version 7.4.8 or above; Upgrade to upcoming FortiMail version 7.2.10 or above; Upgrade to FortiRecorder version 7.6.1 or above; Upgrade to FortiRecorder version 7.2.12 or above; Upgrade to upcoming FortiRecorder version 7.0.7 or above; Fortinet remediated this issue in FortiMail Cloud version 25.1 (not released) and hence customers do not need to perform any action.","last_modified":"2026-10-07T17:59:34.842Z","patch_url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-175","primary_source":"","published":"2026-10-01T19:17:38.938Z"},{"affected":"FortiMail: 7.6.0 \u2264 7.6.3, 7.4.0 \u2264 7.4.5, 7.2.0 \u2264 7.2.8","affected_versions_present":true,"cve_id":"CVE-2025-53681","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-53681","fixed":"Upgrade to FortiMail version 7.6.4 or above; Upgrade to FortiMail version 7.4.6 or above; Upgrade to FortiMail version 7.2.9 or above; Fortinet remediated this issue in FortiMail Cloud version 25.2 and hence customers do not need to perform any action.","last_modified":"2026-07-08T12:48:43.347Z","patch_url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-132","primary_source":"","published":"2026-05-12T16:54:11.052Z"},{"affected":"7.6.0 \u2264 7.6.3; 7.4.0 \u2264 7.4.5; 7.2.0 \u2264 7.2.9; 7.0.0 \u2264 7.0.9","affected_versions_present":true,"cve_id":"CVE-2025-54972","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-54972","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-01-14T09:15:54.810Z","patch_url":"","primary_source":"","published":"2025-11-18T17:01:15.406Z"},{"affected":"6.4.0 \u2264 6.4.4; 6.2.0 \u2264 6.2.9; 6.2.0 < 6.2.*","affected_versions_present":true,"cve_id":"CVE-2021-26091","cve_url":"https://cve.blacktree.nl/cve/CVE-2021-26091","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-03-31T18:11:58.179Z","patch_url":"","primary_source":"","published":"2025-03-24T15:37:58.370Z"},{"affected":"7.4.0","affected_versions_present":true,"cve_id":"CVE-2023-47539","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-47539","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-26T19:09:24.249Z","patch_url":"","primary_source":"","published":"2025-03-18T13:56:56.681Z"},{"affected":"7.6.0 \u2264 7.6.1; 7.4.0 \u2264 7.4.3; 7.2.0 \u2264 7.2.7; 7.0.0 \u2264 7.0.8; 6.4.0 \u2264 6.4.8","affected_versions_present":true,"cve_id":"CVE-2024-46663","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-46663","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-26T19:09:41.215Z","patch_url":"","primary_source":"","published":"2025-03-11T14:54:31.928Z"},{"affected":"7.2.0 \u2264 7.2.4; 7.0.0 \u2264 7.0.6; 6.4.0 \u2264 6.4.7; 7.0.0; 6.4.0 \u2264 6.4.4","affected_versions_present":true,"cve_id":"CVE-2024-56497","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-56497","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-01-14T20:55:21.625Z","patch_url":"","primary_source":"","published":"2025-01-14T14:09:27.433Z"},{"affected":"7.2.0 \u2264 7.2.2; 7.0.0 \u2264 7.0.5; 6.4.0 \u2264 6.4.8; 6.2.0 \u2264 6.2.9; 6.0.0 \u2264 6.0.12","affected_versions_present":true,"cve_id":"CVE-2023-36633","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-36633","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-30T18:10:16.620Z","patch_url":"","primary_source":"","published":"2023-11-14T18:07:46.082Z"},{"affected":"7.4.0; 7.2.0 \u2264 7.2.4; 7.0.0 \u2264 7.0.6; 6.4.0 \u2264 6.4.8; 6.2.0 \u2264 6.2.9","affected_versions_present":true,"cve_id":"CVE-2023-45582","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-45582","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-30T18:14:28.885Z","patch_url":"","primary_source":"","published":"2023-11-14T18:05:34.247Z"},{"affected":"7.2.0 \u2264 7.2.2; 7.0.1 \u2264 7.0.5","affected_versions_present":true,"cve_id":"CVE-2023-36637","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-36637","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-18T20:28:26.875Z","patch_url":"","primary_source":"","published":"2023-10-10T16:50:16.269Z"},{"affected":"7.2.0 \u2264 7.2.2; 7.0.0 \u2264 7.0.5; 6.4.0 \u2264 6.4.7; 6.2.0 \u2264 6.2.9; 6.0.0 \u2264 6.0.12","affected_versions_present":true,"cve_id":"CVE-2023-36556","cve_url":"https://cve.blacktree.nl/cve/CVE-2023-36556","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2025-12-16T18:23:24.904Z","patch_url":"","primary_source":"","published":"2023-10-10T16:49:50.906Z"},{"affected":"6.4.0; 6.2.1 \u2264 6.2.4; 6.0.0 \u2264 6.0.9; 5.4.0 \u2264 5.4.12","affected_versions_present":true,"cve_id":"CVE-2022-29056","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-29056","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-22T20:48:02.279Z","patch_url":"","primary_source":"","published":"2023-03-09T14:54:52.009Z"},{"affected":"5.4.10; 6.0.7; 6.2.2 and earlier; 6.0.0; 6.0.1","affected_versions_present":true,"cve_id":"CVE-2020-9294","cve_url":"https://cve.blacktree.nl/cve/CVE-2020-9294","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-08-04T10:26:16.032Z","patch_url":"","primary_source":"","published":"2020-04-27T16:20:22.000Z"},{"affected":"5.0.0 -> 5.2.9, 5.3.0 -> 5.3.8","affected_versions_present":true,"cve_id":"CVE-2017-3125","cve_url":"https://cve.blacktree.nl/cve/CVE-2017-3125","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-10-25T14:35:22.847Z","patch_url":"","primary_source":"","published":"2017-04-12T15:00:00.000Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"Fortinet"}}