~/article/critical-fortimail-zero-day-exploited-in-the-wild-cve-2026-104286-1qfk9s

critical2026-10-02 08:50 UTCSource: Help Net Security

Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)

Fortinet is warning customers that attackers are exploiting a zero-day vulnerability (CVE-2026-104286) in FortiMail, its email security gateway. Fortinet says the flaw has been reported to be exploited in the wild, and urges customers to apply the workaround it shared until fixes are available. About CVE-2026-104286 “An Improper Limitation of a Pathname to a Restricted Directory (‘Path…

Read at the source

Summary written for cymesh.dev. The full article lives at Help Net Security.

Referenced CVEs

CVE-2026-104286

Topics

zero-day cve

~/cymesh.net

This is what cymesh.net is for

Certificate and hostname problems are the ones you find out about from your users. cymesh.net finds them first.

monitorsTLS/SSL expiry, chain and hostnamealertsemail, ahead of the expiry datescopenon-intrusive, read-only checks

Open the console See cymesh.net

~/related/critical-fortimail-zero-day-exploited-in-the-wild-cve-2026-104286-1qfk9s

2026-10-02 17:02 UTC[high]

Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)

Referenced CVEs

Topics

This is what cymesh.net is for

Related

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response

CISA Adds Two Known Exploited Vulnerabilities to Catalog

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

Zammad GmbH Zammad Session Fixation Vulnerability