HIGHVulnerability
Verified
Global

CISA KEV: Fortinet FortiMail — Fortinet FortiMail Path Traversal Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.

Analysis

Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests. Added to CISA Known Exploited Vulnerabilities catalog on 2026-10-01. Remediation due: 2026-10-04.

Indicators of Compromise (1)

CVE (1)
CVE-2026-104286
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Oct 1, 2026. Verified by: CISA.

Related Threats

LOWVulnerabilityNEW

Crypto Scammers Hijack Microsoft’s Official X Account

Hackers used the account, which has 13 million followers, to amplify a Clippy-themed cryptocurrency account. The post Crypto Scammers Hijack Microsoft’s Official X Account appeared first on SecurityWeek .

SecurityWeek
MEDIUMVulnerabilityNEW

Why CISOs Struggle to Answer the Board's Three Hardest Questions, and How to Fix the Report

The quarterly board meeting is two weeks out. The security team is pulling exports from the identity provider, the cloud posture tool, the vulnerability scanner, the SIEM and the EDR console. Someone is building a spreadsheet to reconcile them. Someone else is turning that spreadsheet into slides. Then a board member asks three questions: How secure is the organization, overall? What is

The Hacker News
MEDIUMVulnerabilityNEW

In Rare Move, Alleged Iranian State Hacker Extradited to US

Amir Barati, an alleged member of the Mabna Institute, was indicted for targeting universities, private organizations, and government entities in the US and abroad. The post In Rare Move, Alleged Iranian State Hacker Extradited to US appeared first on SecurityWeek .

SecurityWeek