Fortinet warns of critical FortiMail vulnerability exploited in zero-day attacks
Fortinet is warning customers about a critical FortiMail vulnerability, CVE-2026-104286, which is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. The vulnerability is classified as critical with a CVSS score of 9.8 and affects the FortiMail administration interface. “A vulnerability related to improper restriction of a pathname to … Read more