> TritonInfoSec News
Home / Oct 03, 2026 / Story
0
#1 The Hacker News general October 02, 2026 at 05:49 UTC

Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

By [email protected] (The Hacker News)

AI Summary

CISA added CVE-2026-104286 (CVSS 9.8) in Fortinet FortiMail to its Known Exploited Vulnerabilities catalog following confirmed active exploitation. The critical path traversal flaw allows unauthenticated attackers to write arbitrary files to the underlying system, making immediate patching essential for all FortiMail deployments.

Read full article → https://thehackernews.com/2026/10/critical-fortima…

Relevance score: 92.0/100

# More from October 03

  1. 2
    Warlock ransomware breach SharePoint in water, telecom operator attacks BleepingComputer
  2. 3
    Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes The Hacker News
  3. 4
    Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers The Hacker News
  4. 5
    GitLab warns of critical RCE vulnerability in AI Gateway service BleepingComputer
  5. 6
    AI Agents Aimed SQL Injection at US and Canadian Government Sites SecurityWeek
  6. 7
    Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability SecurityWeek
  7. 8
    ShinyHunters suspect arrested, and is now investigated over alleged murder plots Graham Cluley
  8. 9
    In Rare Move, Alleged Iranian State Hacker Extradited to US SecurityWeek
  9. 10
    US sanctions Tren de Aragua gang members in ATM hacks crackdown BleepingComputer