Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action
Teaser from the source
CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system. The post Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekLinked advisories
- CVE-2026-104286Improper limitation of a pathname to a restricted directory
- CVE-2026-104286Eine Schwachstelle zur Pfad-Traversierung in Fortinet FortiMail 8.
- CVE-2026-104286Fortinet FortiMail: Schwachstelle ermöglicht Manipulation von Dateien
- CVE-2026-104286Fortinet FortiMail — Fortinet FortiMail Path Traversal Vulnerability
Affected vendors and products
More on FortiMail
Other advisories
- Highbsi:WID-SEC-2026-4133Fortinet FortiOS, FortiManager, FortiAnalyzer, FortiMail und FortiAuthenticator: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
- Criticalpwn_watch:fortinet-ai-found-flaws-hardening-release-oct-2026Fortinet patches critical AI-found flaws in FortiOS, FortiManager, FortiAnalyzer, FortiMail and FortiAuthenticator
- HighCVE-2025-57739Fortinet FortiMail: Schwachstelle ermöglicht Codeausführung
- HighCVE-2025-57739Fortinet FortiMail: SQL-Injection
- HighCVE-2025-57739Eine SQL-Injection-Schwachstelle [CWE-89] in Fortinet FortiMail 7.
- CriticalCVE-2026-104286Fortinet FortiMail: Schwachstelle ermöglicht Manipulation von Dateien
- CriticalCVE-2026-104286Fortinet FortiMail: Pfadüberschreitung (Path Traversal)
- CriticalCVE-2026-104286Eine Schwachstelle zur Pfad-Traversierung in Fortinet FortiMail 8.
Other news entries
- Fortinet FortiOS, FortiManager, FortiAnalyzer, FortiMail und FortiAuthenticator: Mehrere Schwachstellen ermöglichen nicht spezifizierten AngriffVulnerabilityBSI CERT-Bund
- Fortinet FortiMail: Schwachstelle ermöglicht CodeausführungVulnerabilityBSI CERT-Bund
- SQL command injection in webmailNewsFortinet PSIRT
- ⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware ArrestsNewsThe Hacker News
- Fortinet sounds the alarm over actively exploited FortiMail zero-dayNewsThe Register — Security
- Fortinet FortiMail: Schwachstelle ermöglicht Manipulation von DateienVulnerabilityBSI CERT-Bund
- Fortinet FortiMail: Schwachstelle ermöglicht Manipulation von DateienVulnerabilityBSI CERT-Bund
- NCSC-2026-0398 [1.00] [M/H] Kwetsbaarheid verholpen in Fortinet FortiMailNewsNCSC-NL
Source: https://www.securityweek.com/exploited-fortinet-fortimail-zero-day-calls-for-urgent-action/
ID