Fortinet warns of critical FortiMail flaw exploited in zero-day attacks
ID: 0202cbd3-3a3f-53f4-baae-6a5a1ec2bcb9
STIX ID: report--0202cbd3-3a3f-53f4-baae-6a5a1ec2bcb9
Feed Name: Bleeping Computer
Threat Score
Fortinet warns of a critical FortiMail zero-day (CVE-2026-104286, CVSS 9.8) actively exploited to allow unauthenticated attackers to write arbitrary files and potentially execute code; affected FortiMail 7.2–8.0 branches are listed, Fortinet provided temporary workarounds (disable IBE, restrict management access) and published IOCs (file paths, SHA-256 hashes, and IPs 79.141.169.187 and 45.129.0.192), and CISA added the CVE to its Known Exploited Vulnerability catalog requiring federal remediation by Oct 4.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.