Fortinet warns of a critical FortiMail vulnerability being actively exploited

Fortinet reported that critical FortiMail management interface vulnerability CVE-2026-104286 is being actively exploited in zero-day attacks. The vulnerability may allow an unauthenticated attacker to write arbitrary files to the underlying system through crafted HTTP or HTTPS requests and execute unauthorized code or commands.