FortiBleed is still active, targeting Fortinet firewalls and VPN gateways. Stolen credentials are used to create admin accounts, reset passwords, lock out users, and enable ransomware access. #FortiBleed #Fortinet #Payload

A reboot may not clear an infected device: Fortinet says ClingSTUN can persist on vulnerable routers, cameras and other connected devices.

Researchers hav…

https://en.hacks.gr/to-clingstun-mporei-na-diatirei-prosvasi-se-dromologites-kai-kameres-meta-tin-epanekkinisi/

#ClingSTUN #Fortinet #Routers

Citrix NetScaler, FortiMail, Check Point, and MikroTik were all found under attack in one fortnight, mostly before a fix existed. Patching closes the door. It does not tell you who came through it first. Read the filing #citrix #fortinet #patching #infosec

FortiMail is meant to filter dangerous email for businesses.

CISA says a flaw in the product is already being used in attacks, and is urging organizations to check t…

https://en.hacks.gr/i-cisa-proeidopoiei-to-provlima-toy-fortimail-echei-chrisimopoiithei-se-epitheseis/

#FortiMail #Fortinet #CISA

CVE-2026-104286 is a FortiMail 0-day path traversal already being exploited—patch now. #Cybersecurity #Fortinet #ZeroDay #EmailSecurity #CVE2026 #KEV https://thedailytechfeed.com/critical-fortinet-fortimail-0-day-added-to-kev-after-active-exploitation/

Pentagon data, Apple & Fortinet zero-days exploited—patches and precautions urgent. #Cybersecurity #ZeroDay #DataBreach #AIsecurity #Fortinet #Apple https://thedailytechfeed.com/pentagon-breach-apple-fortinet-0-days-headline-26-major-cyber-threats/

Fortinet warns of critical zero-day (CVE-2026-104286) in FortiMail, actively exploited for RCE. CVSS 9.8. CISA added to KEV. Patches are pending, but urgent workarounds are available. #Fortinet #ZeroDay #CVE2026104286 #CyberSecurity

🌐 cyber[.]netsecops[.]io

#Fortinet warns of critical #FortiMail flaw exploited in zero-day attacks

https://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-fortimail-flaw-exploited-in-zero-day-attacks/

#cybersecurity

Fortinet says Critical FortiMail zero-day CVE-2026-104286 is actively exploited.

The unauthenticated flaw can allow arbitrary file writes through crafted HTTP/HTTPS requests.

cyberupdates365.com/fortimail-ze...

#Cybersecurity #Fortinet #ZeroDay

Guessing this shows how today went, right there in a shellnut.

#fortinet #cisa

🚨 Fortinet sounds the alarm over actively exploited FortiMail zero-day

｢ The flaw, tracked as CVE-2026-104286, carries a CVSS score of 9.8 and affects multiple versions of Fortinet's email security platform ｣

www.theregister.com/security/202...

#fortinet #fortimail #cybersecurity

Fortinet alerts that its FortiMail zero-day is actively exploited; patch pending. #Fortinet #FortiMail https://www.theregister.com/security/2026/10/02/fortinet-sounds-the-alarm-over-actively-exploited-fortimail-zero-day/5300803

Fortinet warns of critical zero-day (CVE-2026-104286) in FortiMail, actively exploited for RCE. CVSS 9.8. CISA added to KEV. Patches are pending, but urgent workarounds are available. #Fortinet #ZeroDay #CVE2026104286 #CyberSecurity

🌐 cyber[.]netsecops[.]io

~Cybergcca~
CVE-2026-104286 is actively exploited; update affected FortiMail versions.
-
IOCs: CVE-2026-104286
-
#CVE-2026-104286 #Fortinet #ThreatIntel

Fortinet warns CVE-2026-104286 is being exploited against FortiMail. CVSS 9.8, unauthenticated file writes, no fix released yet. Disable IBE or restrict management access.

fortiguard.fortinet.com/FG-IR-26-175

#Fortinet #DevSecOps

Fortinet reports active exploitation of CVE-2026-104286 in FortiMail, a zero-day path traversal flaw enabling arbitrary file writes via crafted HTTP or HTTPS requests. CISA has added it to the KEV catalog. #Fortinet #FortiMail #CVE2026104286

Achtung bei #Fortinet OS 7.6.6 - es gibt einen #Bug, der den Switch nach 250 Tagen abstürzen lässt. Ein Firmware-Update hilft.
borncity.com/blog/2026/10...

CISA added CVE-2026-104286 to its KEV catalog after active exploitation of a critical FortiMail zero-day. The flaw lets unauthenticated attackers write arbitrary files via crafted HTTP/HTTPS requests. #FortiMail #CVE2026104286 #Fortinet

🔴 FortiMail CVE-2026-104286 — zero-day under active attack
Critical CVSS 9.8 flaw allows unauthenticated arbitrary file writes on vulnerable FortiMail systems. Fortinet confirmed exploitation and CISA added
stemshop.top/blog/fortima...
#CVE #CVE2026104286 #Fortinet #FortiMail #ZeroDay #CyberSecurity

📰 Fortinet Peringatkan Zero-Day Kritis FortiMail CVE-2026-104286 Aktif Dieksploitasi

👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/02/fortimail-cve-2026-104286-zero-day/

#cisa #cybersecurity #fortimail #fortinet #hacking #keamanan #keamananSiber #vulnerability #zero-day