CRITICAL Vulnerabilities
Fortinet FortiMail Path Traversal (CVE-2026-104286) Under Active Attack
CISA confirms active exploitation of CVE-2026-104286, an unauthenticated path traversal vulnerability in Fortinet FortiMail, allowing arbitrary file writes.
- Unauthenticated attackers are actively exploiting FortiMail, enabling arbitrary file writes on affected systems.
- Fortinet FortiMail instances are vulnerable to path traversal (CVE-2026-104286) and null byte issues.
- Apply vendor-provided mitigations or patches immediately to secure FortiMail deployments.
Runtime Rebel Intel
4 min read · Oct 1, 2026