Fortinet FortiMail Path Traversal

Fortinet disclosed a path traversal vulnerability in FortiMail's webmail GUI (notably the /ibe endpoint) allowing unauthenticated attackers to write arbitrary files and potentially achieve full appliance compromise; exploitation in the wild is confirmed by Fortinet and CISA, IoCs (e.g., 79.141.169.187, 45.129.0.192) and log artifacts are published, and Fortinet recommends disabling IBE, applying WAF rules to block POSTs with ../ to /ibe, and upgrading to fixed FortiMail versions (8.0.2+, 7.6.7+, 7.4.9+).