Critical Fortinet FortiMail Vulnerability Enables Arbitrary File Writing

A critical-severity vulnerability in Fortinet FortiMail (CVE-2026-104286) has been identified, exploiting a path traversal flaw that allows attackers to…

If your organization runs FortiMail, immediately verify your installed version and check Fortinet's official security bulletins for available patches. Deploy updates urgently given active exploitation. In parallel, enhance monitoring of mail server logs to detect suspicious file write operations.