Happy #zeroday FortiMail customers
CVE-2026-104286: An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.
> This has been reported to be exploited in the wild
https://fortiguard.fortinet.com/psirt/FG-IR-26-175
#fortinet #cve #vulnerability
ssvc
npub1dv…jfshx
2026-10-01 19:39:17 UTC
Author Public Key
npub1dvrxvdpkggqs4eq5m670khgenxgzqqwmlq8a3kkcru85dsg7e2rsqjfshxSeen on
wss://relay.momostr.pinkPublished at
2026-10-01 19:39:17 UTCEvent JSON
{
"id": "8c10972a9f974d3f62510895525fd654f380ea5dda441df478dccd35625a818e",
"pubkey": "6b0666343642010ae414debcfb5d1999902001dbf80fd8dad81f0f46c11eca87",
"created_at": 1790883557,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@ssvc/117367344842264892",
"web"
],
[
"t",
"zeroday"
],
[
"t",
"fortinet"
],
[
"t",
"vulnerability"
],
[
"t",
"cve"
],
[
"proxy",
"https://infosec.exchange/ap/users/117202824925377048/statuses/117367344842264892",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/ap/users/117202824925377048/statuses/117367344842264892",
"pink.momostr"
],
[
"-"
]
],
"content": "Happy #zeroday FortiMail customers\n\nCVE-2026-104286: An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.\n\n\u003e This has been reported to be exploited in the wild\n\nhttps://fortiguard.fortinet.com/psirt/FG-IR-26-175\n\n#fortinet #cve #vulnerability",
"sig": "0b20756fcfa18fe58883c3033461dcd3eefbc3478cfbffdbc52add6e272cfdadcd9763c4e19ea690264975d1e4ad9da9a488cf8b9d9ed88c985cefc8fabba255"
}