Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:*

2 briefs RSS
critical threat

Critical FortiMail Zero-Day Exploited for Arbitrary File Write

Unauthenticated attackers are actively exploiting a path traversal and NULL byte injection vulnerability (CVE-2026-104286) in FortiMail to write arbitrary files and establish persistence.

exploited FortiMail +3 vulnerability remote-code-execution persistence network-security
3t 1c 2i
critical advisory

Critical RCE Vulnerability in Fortinet Products via AuthHash Cookie (CVE-2025-32756)

A critical unauthenticated stack-based buffer overflow vulnerability, tracked as CVE-2025-32756, affects multiple Fortinet products and can be triggered via a crafted 'enc' parameter in the 'AuthHash' cookie.

FortiMail +4 remote-code-execution buffer-overflow vulnerability
1r 1t 1c