A Vulnerability in Fortinet FortiMail Could Allow for Arbitrary Code Execution
ID: ecc7001f-2719-592e-8b24-8084ec7971b7
STIX ID: report--ecc7001f-2719-592e-8b24-8084ec7971b7
Feed Name: CISecurity.org Advisories
Threat Score
A path traversal and NULL byte injection vulnerability (`CVE-2026-104286`) in the publicly reachable GUI of Fortinet FortiMail may allow unauthenticated remote attackers to write arbitrary files to the underlying system via crafted HTTP/HTTPS requests, potentially enabling arbitrary command execution; the report associates this with Initial Access (TA0001) and Exploit Public-Facing Application (T1190).
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.