Critical FortiMail ZeroDay Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
News Source : Internet
News Summary
- The u.s. Cybersecurity and Infrastructure Security Agency (CISA) added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities ( KEV ) catalog.
- The vulnerability, tracked as CVE-2026-104286 (CVSS score: 9.8), allows unauthenticated attackers to write arbitrary files on the underlying system.
- Fortinet credited Gwendal Guégniaud of the Fortinet Product Security team with discovering and reporting the flaw.
The U.S.
Never miss a story from us, subscribe to our newsletter