Fortinet sounds the alarm over actively exploited FortiMail zero-day
ID: 364c9380-b812-5aa3-949b-f036e2db29ba
STIX ID: report--364c9380-b812-5aa3-949b-f036e2db29ba
Feed Name: The Register (Security)
Threat Score
Fortinet warns of a critical FortiMail zero-day (CVE-2026-104286, CVSS 9.8) that is being actively exploited to write arbitrary files and potentially achieve remote code execution; CISA added the vulnerability to its Known Exploited Vulnerabilities catalog, Fortinet published indicators and mitigations, and some affected versions remain reliant on workarounds until fixes are released.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.