CVE-2026-104286

Fortinet FortiMail Path Traversal Vulnerability

Fortimail

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9, FortiMail 7.0 all versions may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.

1. Okt 2026

Ausgewertete Quellen

• Hersteller
  https://fortiguard.fortinet.com/psirt/FG-IR-26-175
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-104286
• CISA
  Fortinet FortiMail Path Traversal Vulnerability
• NVD
  CVE-2026-104286