FortiMail
CVE-2024-46663: Stack-buffer overflow in FortiMail
A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI commands.
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityMEDIUMCVSS 3.1 6.5
EPSS0.18%Chance of exploitation in 30 days
Public exploitNot tracked
FixAvailable
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| FortiMail 7.6.0 to 7.6.1 | 7.6.2 or later |
| FortiMail 7.4.0 to 7.4.3 | 7.4.4 or later |
| FortiMail 7.2.0 to 7.2.7 | Upgrade past 7.2.7; see the advisory |
| FortiMail 7.0.0 to 7.0.8 | Upgrade past 7.0.8; see the advisory |
| FortiMail 6.4.0 to 6.4.8 | Upgrade past 6.4.8; see the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI commands.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 10 Oct 2026.