Vulnérabilité

CVE-2026-104286 activement exploitée : Fortinet FortiMail Path Traversal

CISA KEV · 1 octobre 2026 à 20 h 00 · Gravité critique

Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.