Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

By Ionut Arghire

AI Summary

CVE-2026-104286, a critical-severity path traversal zero-day in Fortinet FortiMail, is being actively exploited in the wild, allowing attackers to write arbitrary files to affected systems. Security teams running FortiMail should treat this as a priority patch given Fortinet's history as a high-value target for nation-state actors. Urgent action is required as exploitation is confirmed prior to widespread patching.

Read full article → https://www.securityweek.com/exploited-fortinet-fo…

Relevance score: 88.0/100

# More from October 04

2
Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware The Hacker News
3
Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign The Hacker News
4
GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers The Hacker News
5
ShinyHunters hacker reportedly detained in Jordan, aiding FBI BleepingComputer
6
Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools The Hacker News
7
Dell asks admins to patch max severity CSM flaws as soon as possible BleepingComputer
8
Microsoft’s X account hacked in crypto pump-and-dump scheme BleepingComputer
9
Frontline Education breach exposes school district employee data BleepingComputer
10
Danish university DTU breach exposes data of up to 200,000 people BleepingComputer