Multiple security vulnerabilities have been identified in Windows Shell and Connect Secure FortiMail, affecting network-based command injection and remote authentication bypass scenarios. The disclosed affected version is 22.7R2.14. Both flaws can enable unauthorized attackers to bypass protections and execute malicious actions, creating significant risk for exposed systems and users who handle crafted content. The flaws are relevant to environments where untrusted files or remote access services are present.
CVE-2026-96951 (CVSS 8.8 — High): This is a Windows Shell command injection vulnerability that allows an unauthorized attacker to bypass security protections over a network. Exploitation can evade download-protection mechanisms, and an attacker may send a specially crafted file through email or instant messaging, requiring the user to open or interact with it.[/subscribe_to_unlock_form]
Multiple security vulnerabilities have been identified in Windows Shell and Connect Secure FortiMail, affecting network-based command injection and remote authentication bypass scenarios. The disclosed affected version is 22.7R2.14. Both flaws can enable unauthorized attackers to bypass protections and execute malicious actions, creating significant risk for exposed systems and users who handle crafted content. The flaws are relevant to environments where untrusted files or remote access services are present.
CVE-2026-96951 (CVSS 8.8 — High): This is a Windows Shell command injection vulnerability that allows an unauthorized attacker to bypass security protections over a network. Exploitation can evade download-protection mechanisms, and an attacker may send a specially crafted file through email or instant messaging, requiring the user to open or interact with it.[emaillocker id="1283"]
CVE-2026-104935 (CVSS 8.6 — High): This is an authentication bypass vulnerability in Connect Secure FortiMail caused by spoofing, allowing a remote, unauthenticated attacker to execute arbitrary commands.
These vulnerabilities collectively present a high risk to environments where untrusted files are handled or remote access services are exposed. Users and organizations with network-reachable systems are most at risk, particularly when crafted content can prompt user interaction. Organizations should prioritize awareness and monitoring of suspicious activity.
The following reports contain further technical details:
[/emaillocker]