Read the docs
TI-2022-09586 Aliases CVE-2022-26122GHSA-8xr5-vrfj-p7x2

Insufficient verification of data authenticity in Fortinet AV Engine, FortiMail, FortiOS…

Priority LOW 38CWE-345Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · High · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-345.

Summary

An insufficient verification of data authenticity vulnerability [CWE-345] in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below may allow an attacker to bypass the AV engine via manipulating MIME attachment with junk and pad characters in base64.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00634 50th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
FortinetFortinet AV Engine, FortiMail, FortiOS, FortiClientAV Engine version 6.2.168 and below and version 6.4.274 and below.—No fix listedCNA
  • Fortinet AV Engine, FortiMail, FortiOS, FortiClient VendorFortinet Affected AV Engine version 6.2.168 and below and version 6.4.274 and below. Fixed in — No fix listed CNA

CPE configurations NVD · 18

CPEVersionsRoleVendor
cpe:2.3:a:fortinet:antivirus_engine:0.4.23:*:*:*:*:*:*:*0.4.23VulnerableFortinet
cpe:2.3:a:fortinet:antivirus_engine:2.0.49:*:*:*:*:*:*:*2.0.49VulnerableFortinet
cpe:2.3:a:fortinet:antivirus_engine:2.0.60:*:*:*:*:*:*:*2.0.60VulnerableFortinet
cpe:2.3:a:fortinet:antivirus_engine:4.4.54:*:*:*:*:*:*:*4.4.54VulnerableFortinet
cpe:2.3:a:fortinet:antivirus_engine:6.33:*:*:*:*:*:*:*6.33VulnerableFortinet
cpe:2.3:a:fortinet:antivirus_engine:6.137:*:*:*:*:*:*:*6.137VulnerableFortinet
cpe:2.3:a:fortinet:antivirus_engine:6.142:*:*:*:*:*:*:*6.142VulnerableFortinet
cpe:2.3:a:fortinet:antivirus_engine:6.144:*:*:*:*:*:*:*6.144VulnerableFortinet
cpe:2.3:a:fortinet:antivirus_engine:6.145:*:*:*:*:*:*:*6.145VulnerableFortinet
cpe:2.3:a:fortinet:antivirus_engine:6.156:*:*:*:*:*:*:*6.156VulnerableFortinet
  • cpe:2.3:a:fortinet:antivirus_engine:0.4.23:*:*:*:*:*:*:* Versions 0.4.23 Vulnerable ·Fortinet
  • cpe:2.3:a:fortinet:antivirus_engine:2.0.49:*:*:*:*:*:*:* Versions 2.0.49 Vulnerable ·Fortinet
  • cpe:2.3:a:fortinet:antivirus_engine:2.0.60:*:*:*:*:*:*:* Versions 2.0.60 Vulnerable ·Fortinet
  • cpe:2.3:a:fortinet:antivirus_engine:4.4.54:*:*:*:*:*:*:* Versions 4.4.54 Vulnerable ·Fortinet
  • cpe:2.3:a:fortinet:antivirus_engine:6.33:*:*:*:*:*:*:* Versions 6.33 Vulnerable ·Fortinet
  • cpe:2.3:a:fortinet:antivirus_engine:6.137:*:*:*:*:*:*:* Versions 6.137 Vulnerable ·Fortinet
  • cpe:2.3:a:fortinet:antivirus_engine:6.142:*:*:*:*:*:*:* Versions 6.142 Vulnerable ·Fortinet
  • cpe:2.3:a:fortinet:antivirus_engine:6.144:*:*:*:*:*:*:* Versions 6.144 Vulnerable ·Fortinet
  • cpe:2.3:a:fortinet:antivirus_engine:6.145:*:*:*:*:*:*:* Versions 6.145 Vulnerable ·Fortinet
  • cpe:2.3:a:fortinet:antivirus_engine:6.156:*:*:*:*:*:*:* Versions 6.156 Vulnerable ·Fortinet
Show 8 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:fortinet:antivirus_engine:6.157:*:*:*:*:*:*:*6.157VulnerableFortinet
cpe:2.3:a:fortinet:antivirus_engine:6.243:*:*:*:*:*:*:*6.243VulnerableFortinet
cpe:2.3:a:fortinet:antivirus_engine:6.252:*:*:*:*:*:*:*6.252VulnerableFortinet
cpe:2.3:a:fortinet:antivirus_engine:6.253:*:*:*:*:*:*:*6.253VulnerableFortinet
cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*6.0.0 – 6.0.12; 6.2.0 – 6.2.9; 6.4.0 – 6.4.6; 7.0.0 – 7.0.2VulnerableFortinet
cpe:2.3:a:fortinet:fortimail:4.1.0:*:*:*:*:*:*:*4.1.0VulnerableFortinet
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*6.0.0 – 6.0.15; 6.2.0 – 6.2.11; 6.4.0 – 6.4.10; 7.0.0 – 7.0.6VulnerableFortinet
cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*7.2.0VulnerableFortinet
  • cpe:2.3:a:fortinet:antivirus_engine:6.157:*:*:*:*:*:*:* Versions 6.157 Vulnerable ·Fortinet
  • cpe:2.3:a:fortinet:antivirus_engine:6.243:*:*:*:*:*:*:* Versions 6.243 Vulnerable ·Fortinet
  • cpe:2.3:a:fortinet:antivirus_engine:6.252:*:*:*:*:*:*:* Versions 6.252 Vulnerable ·Fortinet
  • cpe:2.3:a:fortinet:antivirus_engine:6.253:*:*:*:*:*:*:* Versions 6.253 Vulnerable ·Fortinet
  • cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:* Versions 6.0.0 – 6.0.12; 6.2.0 – 6.2.9; 6.4.0 – 6.4.6; 7.0.0 – 7.0.2 Vulnerable ·Fortinet
  • cpe:2.3:a:fortinet:fortimail:4.1.0:*:*:*:*:*:*:* Versions 4.1.0 Vulnerable ·Fortinet
  • cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* Versions 6.0.0 – 6.0.15; 6.2.0 – 6.2.11; 6.4.0 – 6.4.10; 7.0.0 – 7.0.6 Vulnerable ·Fortinet
  • cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:* Versions 7.2.0 Vulnerable ·Fortinet

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-26122
  2. 2026-10-03 Alias added: GHSA-8xr5-vrfj-p7x2
  3. 2026-10-30 EPSS moved to the 50th–90th percentile

References

Patch 1

  • TI-2020-07434 FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine… CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences