Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

As cited

Copy frozen at 2026-10-02 03:22 UTC (site build).

vulnerabilities

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

Fortinet disclosed CVE-2026-104286, a critical FortiMail vulnerability with a CVSS score of 9.8 that attackers are actively exploiting in zero-day attacks. The flaw allows remote code execution on vulnerable devices.

Why it matters: Organizations running FortiMail must patch immediately; this vulnerability is listed on the Known Exploited Vulnerabilities (KEV) catalog and is under active exploitation.

Source published

2026-10-01 22:42 UTC

First seen by Cybersecurity Tracker

2026-10-02 01:55 UTC