logo

Fortinet FortiMail CVE-2026-104286: Find impacted applicances

ID: 7ebb0d8a-baab-5848-ad5d-a704e3e49a80

STIX ID: report--7ebb0d8a-baab-5848-ad5d-a704e3e49a80

Feed Name: runZero Blog

Threat Score
90/100

Date Published: 2026-10-01

Date Updated: 2026-10-02

Author: Matthew Kienow

...
...

Fortinet FortiMail (CVE-2026-104286) contains critical path traversal and NULL byte vulnerabilities (CVSS 9.8) that allow unauthenticated remote arbitrary file writes; the flaw is actively exploited in the wild and was added to the CISA Known Exploited Vulnerabilities catalog. Multiple FortiMail 8.0, 7.6, 7.4, and 7.2 versions are affected; Fortinet advises upgrading to patched releases (8.0.2+, 7.6.7+, 7.4.9+, or moving 7.2 to 7.4 branch), and temporary mitigations include disabling IBE or restricting management interface access.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.