NewsThe Register — Security2026-10-02 10:53 UTC

Fortinet sounds the alarm over actively exploited FortiMail zero-day

Teaser from the source

No login required, exploitation underway, and some admins are still waiting for patches

This is the RSS-feed teaser. Read the full article at the original source.

Read at The Register — Security →

Other advisories

CVE-2026-104286critical
Fortinet FortiMail: Schwachstelle ermöglicht Manipulation von Dateien
CVE-2026-104286none
Sicherheitsluecke -- CVE-2026-104286
CVE-2026-104286none
Eine Schwachstelle zur Pfad-Traversierung in Fortinet FortiMail 8.
CVE-2025-53681medium
Eine unzureichende Neutralisierung von Sonderzeichen in SQL-Befehlen (SQL-Injection) [CWE-89]-Schwachstelle in Fortinet FortiMail 7.
CVE-2025-53681medium
Eine unsachgemäße Neutralisierung spezieller Elemente in einem SQL-Befehl ("SQL-Injection"-Sicherheitsanfälligkeit [CWE-89]) in Fortinet FortiMail 7.
CVE-2025-53681medium
An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 thr…
CVE-2025-54972low
fortinet fortimail: Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2025-54972none
fortinet fortimail: Improper Neutralization of CRLF Sequences ('CRLF Injection')

Other news entries

Source: https://www.theregister.com/security/2026/10/02/fortinet-sounds-the-alarm-over-actively-exploited-fortimail-zero-day/5300803

ID