Fortinet warns of critical zero-day (CVE-2026-104286) in FortiMail, actively exploited for RCE. CVSS 9.8. CISA added to KEV. Patches are pending, but urgent workarounds are available. #Fortinet #ZeroDay #CVE2026104286 #CyberSecurity

🌐 cyber[.]netsecops[.]io

Fortinet warns of critical zero-day (CVE-2026-104286) in FortiMail, actively exploited for RCE. CVSS 9.8. CISA added to KEV. Patches are pending, but urgent workarounds are available. #Fortinet #ZeroDay #CVE2026104286 #CyberSecurity

🌐 cyber[.]netsecops[.]io

Fortinet reports active exploitation of CVE-2026-104286 in FortiMail, a zero-day path traversal flaw enabling arbitrary file writes via crafted HTTP or HTTPS requests. CISA has added it to the KEV catalog. #Fortinet #FortiMail #CVE2026104286

CISA added CVE-2026-104286 to its KEV catalog after active exploitation of a critical FortiMail zero-day. The flaw lets unauthenticated attackers write arbitrary files via crafted HTTP/HTTPS requests. #FortiMail #CVE2026104286 #Fortinet

🔴 FortiMail CVE-2026-104286 — zero-day under active attack
Critical CVSS 9.8 flaw allows unauthenticated arbitrary file writes on vulnerable FortiMail systems. Fortinet confirmed exploitation and CISA added
stemshop.top/blog/fortima...
#CVE #CVE2026104286 #Fortinet #FortiMail #ZeroDay #CyberSecurity

Attackers exploit CVE-2026-104286, a 9.8 FortiMail vulnerability allowing unauthenticated file writes. CISA adds it to KEV. Apply the workaround.

#Fortinet #FortiMail #CVE2026104286 #PathTraversal #CISAKEV #ActivelyExploited #ZeroDay