Cyber Security News

CISA Adds Fortinet FortiMail 0-day Vulnerability to KEV Following Active Exploitation

CISA added critical Fortinet FortiMail flaw CVE-2026-104286 to its KEV catalog following evidence of active exploitation.
Tech Times on MSN

Hackers backdoor Fortinet FortiMail email gateways with no password; patches unavailable

Fortinet FortiMail zero-day CVE-2026-104286 lets unauthenticated attackers write arbitrary files to email gateways and plant ...

Fortinet sounds the alarm over actively exploited FortiMail zero-day

Fortinet is warning customers to lock down FortiMail after attackers started exploiting a critical bug that lets them write ...
YAHOO!

FortiMail’s Encryption Feature Was Supposed to Protect Email. It Became the Attack Vector.

A path traversal vulnerability in Fortinet FortiMail’s Identity-Based Encryption GUI component allows unauthenticated attackers to write arbitrary files on the underlying system through crafted HTTP ...
Help Net Security

Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)

Fortinet is warning customers that attackers are exploiting a zero-day vulnerability (CVE-2026-104286) in FortiMail.
Cyber Security News

Critical Fortinet FortiMail 0-Day Vulnerability Actively Exploited in Attacks

Fortinet has warned that attackers are actively exploiting a critical FortiMail zero-day vulnerability, putting exposed email ...

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively ...