Unrated severityNVD Advisory· Published Mar 18, 2025· Updated Feb 26, 2026

CVE-2023-47539

Description

An improper access control vulnerability in FortiMail version 7.4.0 configured with RADIUS authentication and remote_wildcard enabled may allow a remote unauthenticated attacker to bypass admin login via a crafted HTTP request.

Affected products

Fortinet/Fortimailv5
cpe:2.3:a:fortinet:fortimail:7.4.0:*:*:*:*:*:*:*
Range: 7.4.0

Patches

Vulnerability mechanics

References

fortiguard.com/psirt/FG-IR-23-439mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000