CVE-2022-26122

HIGH Year: 2022
CVSS v3 Score
8.6
High
Weakness Type
CWE-345
View all →

Vulnerability Description

An insufficient verification of data authenticity vulnerability [CWE-345] in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below may allow an attacker to bypass the AV engine via manipulating MIME attachment with junk and pad characters in base64.

Related Vulnerabilities

CVE-2016-4553

HIGH
CVSS:8.6(High)

client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which allows remote attackers to conduct cache-poisoning attacks via...

CWE-3452016

CVE-2016-4554

HIGH
CVSS:8.6(High)

mime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin restrictions and possibly conduct cache-poisoning attacks via a crafted HTTP Host header, aka a "header smu...

CWE-3452016

CVE-2018-10080

HIGH
CVSS:8.6(High)

Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wan_dns.asp request in conjunction with a crafted admin cookie.

CWE-3452018

CVE-2021-1586

HIGH
CVSS:8.6(High)

A vulnerability in the Multi-Pod or Multi-Site network configurations for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remot...

CWE-3452021

CVE-2025-1108

HIGH
CVSS:8.6(High)

Insufficient data authenticity verification vulnerability in Janto, versions prior to r12. This allows an unauthenticated attacker to modify the content of emails sent to reset the password. To exploi...

CWE-3452025

CVE-2025-24903

HIGH
CVSS:8.5(High)

libsignal-service-rs is a Rust version of the libsignal-service-java library which implements the core functionality to communicate with Signal servers. Prior to commit 82d70f6720e762898f34ae76b0894b0...

CWE-3452025