Vulnerability
Published 2026-10-01
Verified 2026-10-02
Fortinet FortiMail (CVE-2026-104286)
Fortinet FortiMail Path Traversal Vulnerability. Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests. Apply vendor mitigations. Check the NVD record and the vendor advisory for affected versions and the patch.
- Product
- Fortinet FortiMail
- Exploited in Australia?
- unknown
Primary: NVD · Vendor: CISA KEV · CVE: CVE-2026-104286