Skip to content
Threat Feed
Subscribe

Product

FortiMail (7.4.0-7.4.8)

1 brief RSS
critical threat

Critical FortiMail Zero-Day Exploited for Arbitrary File Write

Unauthenticated attackers are actively exploiting a path traversal and NULL byte injection vulnerability (CVE-2026-104286) in FortiMail to write arbitrary files and establish persistence.

exploited FortiMail +3 vulnerability remote-code-execution persistence network-security
3t 1c 2i