Known Exploited Vulnerabilities October 01, 2026 · CISA KEV Catalog

CVE-2026-104286: Fortinet Forti Mail Path Traversal Vulnerability

Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-104286 Fortinet
Related: CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability Known Exploited Vulnerabilities · Oct 16, 2026
CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Sep 09, 2026
CVE-2025-68686: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Known Exploited Vulnerabilities · Jul 27, 2026