HackerFeeds

CyberSecurity News

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

SecurityWeek
· October 2, 2026
Vulnerabilities

AI summary

A critical-severity path traversal vulnerability, identified as CVE-2026-104286, has been discovered in Fortinet FortiMail, allowing attackers to write arbitrary files to the system. This vulnerability is a zero-day exploit, necessitating urgent action to address the issue.

Vulnerabilities mentioned

CVE-2026-104286
CRITICAL
CVSS 9.8
CISA KEV

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.

Read the full article at SecurityWeekwww.securityweek.com/exploited-fortinet-fortimail-zero-day-calls-for-urgent-action/

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to SecurityWeek.