Fortinet warns of critical FortiMail flaw exploited in zero-day attacks
Teaser from the source
Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputer →Linked advisories
- CVE-2026-104286Fortinet FortiMail — Fortinet FortiMail Path Traversal Vulnerability
- CVE-2026-104286Eine Schwachstelle zur Pfad-Traversierung in Fortinet FortiMail 8.
- CVE-2026-104286Improper limitation of a pathname to a restricted directory
- CVE-2026-104286Fortinet FortiMail: Schwachstelle ermöglicht Manipulation von Dateien
More on FortiMail
Other advisories
- CVE-2026-104286criticalFortinet FortiMail: Schwachstelle ermöglicht Manipulation von Dateien
- CVE-2026-104286noneSicherheitsluecke -- CVE-2026-104286
- CVE-2026-104286noneEine Schwachstelle zur Pfad-Traversierung in Fortinet FortiMail 8.
- CVE-2025-53681mediumEine unzureichende Neutralisierung von Sonderzeichen in SQL-Befehlen (SQL-Injection) [CWE-89]-Schwachstelle in Fortinet FortiMail 7.
- CVE-2025-53681mediumEine unsachgemäße Neutralisierung spezieller Elemente in einem SQL-Befehl ("SQL-Injection"-Sicherheitsanfälligkeit [CWE-89]) in Fortinet FortiMail 7.
- CVE-2025-53681mediumAn improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 thr…
- CVE-2025-54972lowfortinet fortimail: Improper Neutralization of CRLF Sequences ('CRLF Injection')
- CVE-2025-54972nonefortinet fortimail: Improper Neutralization of CRLF Sequences ('CRLF Injection')
Other news entries
- Newsthehackernews2026-10-05⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
- Newstheregister-security2026-10-02Fortinet sounds the alarm over actively exploited FortiMail zero-day
- Vulnerabilitybsi-cert-bund-wid2026-10-02Fortinet FortiMail: Schwachstelle ermöglicht Manipulation von Dateien
- Vulnerabilitybsi-cert-bund-wid2026-10-02Fortinet FortiMail: Schwachstelle ermöglicht Manipulation von Dateien
- Newssecurityweek2026-10-02Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action
- Newsncsc-nl2026-10-02NCSC-2026-0398 [1.00] [M/H] Kwetsbaarheid verholpen in Fortinet FortiMail
- Newsthehackernews2026-10-02Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
- Newscert-fr2026-10-02Vulnérabilité dans Fortinet FortiMail (02 octobre 2026)
ID