Fortinet FortiMail GUI is vulnerable to path traversal with NULL byte handling flaws via crafted HTTP/HTTPS requests, allowing unauthenticated arbitrary file writes and potential code/command execution. Affects 8.0.0-8.0.1, 7.6.0-7.6.6, 7.4.0-7.4.8, 7.2.0-7.2.9. Mitigate by disabling IBE: config system encryption ibe set status disable end, and restrict management interface to trusted networks; upgrade to 8.0.2+, 7.6.7+, 7.4.9+, or 7.4+ branch.