Critical FortiMail ZeroDay Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

Image for article Critical FortiMail ZeroDay Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
News Source : Internet

News Summary

  • The u.s. Cybersecurity and Infrastructure Security Agency (CISA) added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities ( KEV ) catalog.
  • The vulnerability, tracked as CVE-2026-104286 (CVSS score: 9.8), allows unauthenticated attackers to write arbitrary files on the underlying system.
  • Fortinet credited Gwendal Guégniaud of the Fortinet Product Security team with discovering and reporting the flaw.
The U.S.

Must read Articles