Mmastodon Technology Cybersecurity first seen 5 h ago, last 5 h ago, peak #6

CISA Flags Actively Exploited Critical FortiMail Flaw

Original: CISA adds CVE-2026-104286 (CVSS 9.8) to KEV—critical flaw in Fortinet FortiMail allowing unauthenticated attackers to wr

CISA has added CVE-2026-104286 to its Known Exploited Vulnerabilities catalog after reports of active attacks. The flaw, rated 9.8 out of 10 in severity, affects Fortinet's FortiMail and lets unauthenticated attackers write arbitrary files on vulnerable servers. Security teams are urged to patch immediately, as the flaw is described as a zero-day already being exploited in the wild.

Why now: Actively exploited critical vulnerabilities in widely used enterprise email security products demand urgent patching from organizations worldwide.

CISA Fortinet FortiMail CVE-2026-104286

Open on mastodon →

Evidence

CISA adds CVE-2026-104286 (CVSS 9.8) to KEV—critical flaw in Fortinet FortiMail allowing unauthenticated attackers to write arbitrary files. Active exploitation reported. # Cybersecurity https:// thehackernews.com/2026/10/crit ical-fortimail-zero-day-flaw.html · technoholic · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/1086479