Vulnerabilities

GreenboneOS: CVE-2026-104286: Fortinet FortiMail Management Interfaces Actively Exploited

October 12, 2026 1 min read 1 views
cybersecurity news newsapi
CVE-2026-104286 (CVSS 9.8, EPSS ≥ 82nd pctl) is a critical path traversal [CWE-22] and NULL-byte handling flaw [CWE-158] affecting Fortinet FortiMail. Exploitation can be achieved via HTTP/HTTPS request to the FortiMail web interface. The CVE was both publish

Was this article helpful?

0 found this helpful

Related Articles

Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability

1 min read

Cisco make-me-root email bug exploited as a 0-day by unknown crims

3 min read

Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles

1 min read

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.

Schedule a Demo