CISA Adds Critical Fortinet FortiMail Zero-Day Flaw to Exploited Vulnerabilities List

The U.S. CISA has included a critical Fortinet FortiMail zero-day vulnerability (CVE-2026-104286) in its Known Exploited Vulnerabilities catalog, urging immediate mitigation due to active exploitation. This path traversal flaw allows unauthenticated attackers to write arbitrary files via crafted HTTP/HTTPS requests. Fortinet recommends disabling the Identity-Based Encryption feature or restricting management interface access until patches are released.