Fortinet FortiMail CVE-2026-104286: Find impacted applicances
ID: 7ebb0d8a-baab-5848-ad5d-a704e3e49a80
STIX ID: report--7ebb0d8a-baab-5848-ad5d-a704e3e49a80
Feed Name: runZero Blog
Fortinet FortiMail (CVE-2026-104286) contains critical path traversal and NULL byte vulnerabilities (CVSS 9.8) that allow unauthenticated remote arbitrary file writes; the flaw is actively exploited in the wild and was added to the CISA Known Exploited Vulnerabilities catalog. Multiple FortiMail 8.0, 7.6, 7.4, and 7.2 versions are affected; Fortinet advises upgrading to patched releases (8.0.2+, 7.6.7+, 7.4.9+, or moving 7.2 to 7.4 branch), and temporary mitigations include disabling IBE or restricting management interface access.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
