References https://vulners.com/fortinet/FG-IR-21-185 https://cloud.tencent.com/developer/article/1949392 https://www.sxxdckj.com/cms/a/Fortinet-FortiMail-kua-zhan-jue-ben-lou-dong-CNVD-2022-19073.html https://cve.imfht.com/poc_detail/2cdc688b18396c18e34a11c84fa7a605c55ee5ed https://avd.aliyun.com/product?prod=fortimail&page=-8 https://nvd.nist.gov/vuln/detail/cve-2021-43062 https://www.exploit-db.com/exploits/50759 https://fortiguard.fortinet.com/psirt/FG-IR-21-185 https://gist.github.com/z0rs/1af5770a118a3c5cd2faea6667196021 https://feedly.com/cve/CVE-2021-43062 https://pentest-tools.com/vulnerabilities-exploits/fortinet-fortimail-701-cross-site-scripting_3194
Related VulnerabilitiesPoCCVE-2026-39808: Fortinet FortiSandbox - Command InjectionFortinet FortiSandbox /fortisandbox/job-detail/tracer-behavior 命令执行漏洞(CVE-2026-39808)PoCCVE-2026-21643: Fortinet FortiClientEMS 7.4.4 - SQL InjectionPoCCVE-2025-52970: Fortinet FortiWeb - Authentication Bypass to Admin PrivilegeFortinet FortiOS等 签名验证不当漏洞Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞(CVE-2025-64446/CVE-2025-58034)Fortinet FortiWeb 需授权 命令注入漏洞Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞(CVE-2025-64446)PoCFortinet FortiWeb 未授权身份验证绕过漏洞(CVE-2025-64446)