Fortinet Warns of Critical FortiMail Zero-Day CVE-2026-104286 Exploited in the Wild, With Patches Not Yet Released
Fortinet says attackers are actively exploiting a critical FortiMail flaw, CVE-2026-104286 (CVSS 9.8), that lets unauthenticated attackers write arbitrary files. Fixes are planned but not yet released, so admins should apply workarounds now.







