https://vulnerability.circl.lu/sightings/feed 2026-10-03T03:14:19.343907+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/39aba7e7-8ab9-4aa2-b145-f59d8e3efc3e/export 2026-10-03T03:14:19.370249+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "39aba7e7-8ab9-4aa2-b145-f59d8e3efc3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwwshk5zqv26", "content": "\ud83d\udccc CVE-2026-104286 - An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7... https://www.cyberhub.blog/cves/CVE-2026-104286", "creation_timestamp": "2026-10-03T02:07:06.623916Z"} 2026-10-03T02:07:06.623916+00:00 https://vulnerability.circl.lu/sighting/4c0d955a-2f00-41de-a299-bccb0c2e94d5/export 2026-10-03T03:14:19.373219+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4c0d955a-2f00-41de-a299-bccb0c2e94d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwwpknjt4s24", "content": "Fortinet warns of critical FortiMail flaw exploited in zero-day attacks\n\nFortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable dev\u2026\n#hackernews #news", "creation_timestamp": "2026-10-03T01:15:09.557399Z"} 2026-10-03T01:15:09.557399+00:00 https://vulnerability.circl.lu/sighting/8bc7d34e-78d8-4524-8c16-0424328614c3/export 2026-10-03T03:14:19.373392+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8bc7d34e-78d8-4524-8c16-0424328614c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/cybernewsdaily.bsky.social/post/3mwwjgqk55t24", "content": "Fortinet FortiMail flaw CVE-2026-104286 actively exploited, allowing arbitrary file writes\n\nSponsor this channel today. https://www.ProNetGrowth.com/?utm_source=bluesky&utm_medium=post&utm_campaign=news-cybersecurity&utm_content=cybersecurity\n\n#cybersecurity #hacking", "creation_timestamp": "2026-10-02T23:25:36.890113Z"} 2026-10-02T23:25:36.890113+00:00 https://vulnerability.circl.lu/sighting/8e18411b-d03b-4ab5-b772-a59a1ba3bbc3/export 2026-10-03T03:14:19.373499+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8e18411b-d03b-4ab5-b772-a59a1ba3bbc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "published-proof-of-concept", "source": "https://t.me/VulnerabilityNews/44735", "content": "Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action\n\nCVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.\nThe post Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action appeared first on SecurityWeek.\nhttps://www.securityweek.com/exploited-fortinet-fortimail-zero-day-calls-for-urgent-action/", "creation_timestamp": "2026-10-02T23:00:48.000000Z"} 2026-10-02T23:00:48+00:00 https://vulnerability.circl.lu/sighting/541cb9d0-d6eb-471e-a3a1-bbd22e96001b/export 2026-10-03T03:14:19.373605+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "541cb9d0-d6eb-471e-a3a1-bbd22e96001b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://t.me/VulnerabilityNews/44735", "content": "Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action\n\nCVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.\nThe post Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action appeared first on SecurityWeek.\nhttps://www.securityweek.com/exploited-fortinet-fortimail-zero-day-calls-for-urgent-action/", "creation_timestamp": "2026-10-02T23:00:48.000000Z"} 2026-10-02T23:00:48+00:00 https://vulnerability.circl.lu/sighting/04c39ef6-cf31-449e-b1b7-3265ec54a4d2/export 2026-10-03T03:14:19.373713+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "04c39ef6-cf31-449e-b1b7-3265ec54a4d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mwwdlxb2nh2m", "content": "\ud83d\udea8 Fortinet reports CVE-2026-104286 is being exploited in the wild.\n\nCensys observes ~2,800 Internet-exposed FortiMail hosts, excluding honeypots. No fixed builds are available yet.\n\nCensys ARC advisory: https://bit.ly/4htjUkY ", "creation_timestamp": "2026-10-02T21:41:34.005498Z"} 2026-10-02T21:41:34.005498+00:00 https://vulnerability.circl.lu/sighting/22c9c396-23d2-4edd-8f4b-fb264ed6760d/export 2026-10-03T03:14:19.373815+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "22c9c396-23d2-4edd-8f4b-fb264ed6760d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a66b618f-aae5-401b-b529-f7b0c130cdcb", "content": "", "creation_timestamp": "2026-10-02T20:00:45.002905Z"} 2026-10-02T20:00:45.002905+00:00 https://vulnerability.circl.lu/sighting/ab31b551-a57a-41d5-82c3-a1b555095b2b/export 2026-10-03T03:14:19.373912+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ab31b551-a57a-41d5-82c3-a1b555095b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mww3c2wl7k27", "content": "6/7 Patch alert: Fortinet FortiMail zero-day (a flaw with no fix yet) CVE-2026-104286, rated 9.8/10, is exploited. Disable IBE, hide management access. CISA deadline: Oct 4. via Help Net Security", "creation_timestamp": "2026-10-02T19:12:29.404557Z"} 2026-10-02T19:12:29.404557+00:00 https://vulnerability.circl.lu/sighting/b8ea8957-b3ee-48bc-a1ab-507b9bc128c8/export 2026-10-03T03:14:19.374009+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b8ea8957-b3ee-48bc-a1ab-507b9bc128c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mww3c2wkac27", "content": "6/7 Patch alert: Fortinet FortiMail zero-day (a flaw with no fix yet) CVE-2026-104286, rated 9.8/10, is exploited. Disable IBE, hide management access. CISA deadline: Oct 4. via Help Net Security", "creation_timestamp": "2026-10-02T19:12:28.947534Z"} 2026-10-02T19:12:28.947534+00:00 https://vulnerability.circl.lu/sighting/5ef0b0d2-2a4d-4c0d-99f6-e1923a079c49/export 2026-10-03T03:14:19.374106+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5ef0b0d2-2a4d-4c0d-99f6-e1923a079c49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mww3c2wjb227", "content": "6/7 Patch alert: Fortinet FortiMail zero-day (a flaw with no fix yet) CVE-2026-104286, rated 9.8/10, is exploited. Disable IBE, hide management access. CISA deadline: Oct 4. via Help Net Security", "creation_timestamp": "2026-10-02T19:12:28.478235Z"} 2026-10-02T19:12:28.478235+00:00