CVE-2024-46663 MEDIUM

CVE-2024-46663

Vendor Fortinet
Product FortiMail
Weakness CWE-121
Published March 11, 2025
Last update February 26, 2026
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C

What the vulnerability does

01Description

A stack-buffer overflow vulnerability [CWE-121] in Fortinet FortiMail CLI version 7.6.0 through 7.6.1 and before 7.4.3 allows a privileged attacker to execute arbitrary code or commands via specifically crafted CLI commands.

Key dates

02Disclosure timeline

March 11, 2025 CVE published
February 26, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-1217 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities CVE-2026-6124 Tenda F451 httpd SafeMacFilter fromSafeMacFilter stack-based overflow CVE-2025-7019 Avast antivirus stack overflow when scanning a malformed Office Open XML file CVE-2010-20121 EasyFTP Server <= 1.7.0.11 CWD Command Stack Buffer Overflow CVE-2023-35355 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability