Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)
ID: f2d9a043-c704-5899-85e0-ec17291f8981
STIX ID: report--f2d9a043-c704-5899-85e0-ec17291f8981
Feed Name: Help Net Security
Threat Score
Fortinet warns of a zero-day (CVE-2026-104286) in FortiMail — an unauthenticated path traversal and NULL-byte vulnerability with CVSS 9.8 — that is being exploited in the wild; Fortinet and CISA have published advisories, provided affected versions and IOCs, and recommend mitigations (disable IBE or restrict management access) until patches are released.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.