search
FortiMail
Trends
- 1Pentagon Data Breach and Apple Zero-Days Dominate Security News▼Cybersecurity Newsletter Bulletin – Pentagon Data Breach, Citrix, Fortimail and Apple 0-days and 20+ stories
A cybersecurity newsletter bulletin rounds up more than 20 stories, headlined by a data breach at the Pentagon alongside newly disclosed zero-day vulnerabilities in Citrix, Fortimail and Apple products. The roundup highlights an unusually busy stretch for security teams, with flaws affecting widely used enterprise and consumer software requiring urgent patching and attention.
- 2Fortinet Warns of Zero-Day Attacks on FortiMail Systems▼Fortinet Warns of FortiMail Zero-Day Attacks As Critical Flaw Exposes Email Security Systems
Fortinet has issued a warning that attackers are actively exploiting a critical zero-day vulnerability in its FortiMail email security products. The flaw could allow compromise of systems that organizations rely on to filter and protect email. Administrators are being urged to apply patches and review their FortiMail deployments, as details about affected versions and exploitation methods continue to circulate in security advisories.
- 3CISA adds actively exploited Fortinet FortiMail flaw to catalog▼U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency has added a vulnerability in Fortinet's FortiMail to its Known Exploited Vulnerabilities catalog, confirming the flaw is being actively abused in attacks. Inclusion requires federal civilian agencies to patch by the mandated deadline, and organizations running FortiMail are urged to update immediately.
- 4Citrix and Fortinet zero-days under active exploitation●Recent news highlights critical cybersecurity threats as Citrix NetScaler (CVE-2026-88772) and FortiMail (CVE-2026-10428
Security researchers warn that newly disclosed zero-day vulnerabilities in Citrix NetScaler (CVE-2026-88772) and FortiMail (CVE-2026-104286) are being actively exploited, with critical infrastructure and government organisations among the targets. Apple has separately patched a CoreGraphics flaw already used in attacks. Administrators are urged to apply patches urgently and review systems for signs of compromise.
- 5CISA Flags Actively Exploited Critical FortiMail Flaw●CISA adds CVE-2026-104286 (CVSS 9.8) to KEV—critical flaw in Fortinet FortiMail allowing unauthenticated attackers to wr
CISA has added CVE-2026-104286 to its Known Exploited Vulnerabilities catalog after reports of active attacks. The flaw, rated 9.8 out of 10 in severity, affects Fortinet's FortiMail and lets unauthenticated attackers write arbitrary files on vulnerable servers. Security teams are urged to patch immediately, as the flaw is described as a zero-day already being exploited in the wild.
- 6Critical FortiMail Zero-Day Flaw Exploited in Active Attacks●Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
Security researchers report that a critical zero-day vulnerability in Fortinet's FortiMail product is being exploited in real-world attacks. The flaw allows unauthenticated attackers to write arbitrary files, potentially enabling remote code execution on affected email security servers. Administrators are urged to apply patches and restrict exposure. Fortinet has faced a series of exploited vulnerabilities in recent months, keeping the company under scrutiny.
- 7FortiMail zero-day actively exploited with no patch available●2026-W40 — Weekly Threat Roundup 🔥 A zero-day in Fortinet FortiMail (CVE-2026-104286) is actively exploited with no patc
A weekly threat roundup reports that a zero-day vulnerability in Fortinet's FortiMail, tracked as CVE-2026-104286, is being actively exploited while no patch is available, forcing administrators to rely on interim workarounds. The same roundup notes Operation KillSwitch dismantled the KillSec ransomware group, allegedly run by a 16-year-old, with seizures reportedly carried out.
- 8Fortinet warns of active zero-day attacks on FortiMail●FortiMail: Angriffe auf Zero-Day-Lücke laufen, Workaround verfügbar Fortinet warnt vor Angriffen auf eine Zero-Day-Siche
Fortinet is warning that attackers are actively exploiting a zero-day vulnerability in its FortiMail email security product. The flaw allows attackers to take over affected devices over the network. A workaround is available while a full patch is pending, and administrators are urged to apply mitigations immediately.
- 9Fortinet FortiMail zero-day flaw exploited in attacks●https:// osintsights.com/fortinet-forti mail-zero-day-flaw-exploited-in-attacks?utm_source=mastodon&utm_medium=social #
A report from OSINT Insights says attackers are actively exploiting a zero-day vulnerability in Fortinet's FortiMail email security product. The item is being shared among cybersecurity professionals on Mastodon with warnings such as 'patched or perish', signalling urgency for administrators to patch affected FortiMail systems before attackers gain wider footholds via email infrastructure.
- 10Fortinet urges immediate patching of FortiMail installations●RESOLUTION NOTES: Patch your FortiMail installations immediately and monitor Fortinet's vendor advisories, or we will cl
Security responders are telling organizations to patch their FortiMail installations immediately and to follow Fortinet's vendor advisories closely. The message comes in a blunt, half-joking incident-response note warning that tickets will be closed as 'user refused to help themselves' if admins ignore the patching guidance. The advice underscores that unpatched FortiMail systems remain a live risk and that defenders should treat Fortinet advisories as urgent action items, not background reading.
- 11Fortinet urges urgent patching of exploited FortiMail zero-day●🚨🐛 SIGINT // Cybersecurity Watch — 2026-10-03 Active exploitation of a FortiMail zero-day demands immediate patching—ema
Fortinet's FortiMail email security gateway is under active exploitation through a previously unknown vulnerability, prompting urgent calls for administrators to apply patches immediately. Security researchers warn that email gateways are prized targets because compromising them gives attackers a foothold into corporate networks and access to sensitive mail traffic.
- 12Fortinet FortiMail Bug CVE-2026-104286 Actively Exploited●Fortinet FortiMail CVE-2026-104286 Actively Exploited: Critical Path Traversal and NULL Byte Vulnerability Alert
Fortinet has a critical vulnerability, tracked as CVE-2026-104286, in its FortiMail email security product. The flaw involves path traversal combined with NULL byte handling, and security researchers report it is being actively exploited in the wild. Administrators are being urged to apply patches immediately to prevent attackers from compromising mail servers.