U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog
ID: 9ba89534-dae7-5605-b5e4-bd6e6d98ef07
STIX ID: report--9ba89534-dae7-5605-b5e4-bd6e6d98ef07
Feed Name: Security Affairs
Threat Score
CISA added Fortinet FortiMail vulnerability CVE‑2026‑104286 (CVSS 9.8) to its Known Exploited Vulnerabilities catalog after reports of in-the-wild exploitation; the path traversal and NULL-byte handling bug can allow unauthenticated attackers to write arbitrary files. Fortinet issued fixes for affected FortiMail 7.2–8.0 branches and recommended temporary workarounds (disable IBE or block management access); federal agencies were ordered to remediate by October 3, 2026.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.