{"vulnerability": "CVE-2026-104286", "sightings": [{"uuid": "573324ec-a337-4fa6-9367-3e4a6970cc6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117367344842264892", "content": "Happy #zeroday FortiMail customers\nCVE-2026-104286: An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.\n\nThis has been reported to be exploited in the wild\nhttps://fortiguard.fortinet.com/psirt/FG-IR-26-175\n#fortinet #cve #vulnerability", "creation_timestamp": "2026-10-01T19:39:36.875689Z"}, {"uuid": "3eefecbe-7c12-4f8e-b7a0-f3c37bcdc331", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/da99da21-0ddb-4170-9067-f0610577bf63", "content": "", "creation_timestamp": "2026-10-01T20:00:01.873045Z"}, {"uuid": "c4231b2e-5949-4c50-b086-2ba184f3ef5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mwtnufbfsi2f", "content": "Fortinet confirms active exploitation of CVE-2026-104286, a CVSS 9.8 path traversal flaw in FortiMail letting unauthenticated attackers write arbitrary files. CISA added it to KEV today. Affects FortiMail 7.2 through 8.0.1; patches are out. fortiguard.fortinet.com/psirt/FG-IR-26-175", "creation_timestamp": "2026-10-01T20:06:49.804395Z"}, {"uuid": "8a338afe-dd7d-40c2-a223-415f60cf62c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mwto6qb5gk2v", "content": "\ud83d\uded1 CVE-2026-104286\nFortinet FortiMail\nKEV \u2705\nTL;DR: Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vu\u2026\nhttps://cvesentinel.com/report/CVE-2026-104286?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-10-01T20:12:36.882115Z"}, {"uuid": "eb681b3e-ee04-411a-ae36-4d52b0802464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mwtqu235e32v", "content": "\ud83d\udea8 CISA Adds One Known Exploited Vulnerability to Catalog (https://secdb.nttzen.cloud/security-advisory/detail/CISA-2026:1001)\n\n\u26a0\ufe0f CVE-2026-104286 - Fortinet FortiMail Path Traversal Vulnerability\n\n\n#ZEN #SecDB #InfoSec #CISA_KEV", "creation_timestamp": "2026-10-01T21:00:19.516538Z"}, {"uuid": "e83b0e10-8cde-4bcf-8398-14b08a257cee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104286", "type": "seen", "source": "https://bsky.app/profile/planetbriefing.bsky.social/post/3mwtrwqeflk2e", "content": "CVE-2026-104286: Fortinet FortiMail Path Traversal Vulnerability\n\nFortinet FortiMail contains a path traversal and NULL-byte vulnerability that may allow an u\u2026\n\nhttps://planetbriefing.com/events/cve-2026-104286-fortinet-fortimail-path-traversal-vulnerability-b95400842dc8\n\n#Technology #UnitedStates", "creation_timestamp": "2026-10-01T21:19:44.125858Z"}, {"uuid": "312b477c-3227-4516-8bdc-9246763e6d3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/aipostdaily.bsky.social/post/3mwtrxd67fj24", "content": "CISA added CVE-2026-104286 to its Known Exploited Vulnerabilities list (2026-10-01).\nFortinet FortiMail Path Traversal\n#infosec #KEV", "creation_timestamp": "2026-10-01T21:20:04.301232Z"}, {"uuid": "09a166d0-ba20-4163-a678-4b20728e4727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mwtsxbk7ju22", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-104286: An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 throug\u2026\nCVSS 9.8 \u00b7 exploited\nhttps://beta.vulnsea.com/cve/CVE-2026-104286\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-10-01T21:37:55.148888Z"}, {"uuid": "af2a0e8a-a0cb-48e1-9a4a-11618c2b9c2b", "vulnerability_lookup_origin": "cce329bf-df49-4c6e-a027-80be2e6483bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/91caa741-17b0-4e52-92de-7c8cde17b5f9", "content": "", "creation_timestamp": "2026-10-01T22:00:01.947863Z"}, {"uuid": "6bb3301b-502f-40bf-bee4-4a45e6313e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwtunbxki22h", "content": "\ud83d\udea8 CVE-2026-104286 \u2014 CVSS 9.8 CRITICAL\n\nAn improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-104286\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-01T22:08:07.385592Z"}, {"uuid": "330fa901-8b8b-4e7d-b5dd-ee155a0e04d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwtuqisy5q2e", "content": "Attackers exploit CVE-2026-104286, a 9.8 FortiMail vulnerability allowing unauthenticated file writes. CISA adds it to KEV. Apply the workaround.\n\n#Fortinet #FortiMail #CVE2026104286 #PathTraversal #CISAKEV #ActivelyExploited #ZeroDay", "creation_timestamp": "2026-10-01T22:09:55.871833Z"}, {"uuid": "274d84c1-774e-47aa-9016-7bbe87e7b5aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mwtwlw4yxk2e", "content": "Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices.", "creation_timestamp": "2026-10-01T22:43:09.083680Z"}, {"uuid": "af352d5e-61e3-48db-9188-4af5b9869881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwtxik3fgc2e", "content": "Fortinet\u3001\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u308bFortiMail\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u8b66\u544a\n\nFortinet\u306f\u3001FortiMail\u306b\u5b58\u5728\u3059\u308b\u91cd\u5927\u306a\u8106\u5f31\u6027\u300cCVE-2026-104286\u300d\u306b\u3064\u3044\u3066\u3001\u9867\u5ba2\u306b\u8b66\u544a\u3092\u767a\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306f\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u5b9f\u969b\u306b\u60aa\u7528\u3055\u308c\u3066\u304a\u308a\u3001\u8106\u5f31\u306a\u30c7\u30d0\u30a4\u30b9\u4e0a\u3067\u4e0d\u6b63\u306a\u30b3\u30fc\u30c9\u3084\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3055\u308c\u308b\u6050\u308c\u304c\u3042\u308a\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306e\u6df1\u523b\u5ea6\u306f\u3001CVSS\u30b9\u30b3\u30a29.8\u306e\u300c\u91cd\u5927\u300d\u3067\u3059\u3002\u5f71\u97ff\u3092\u53d7\u3051\u308b\u306e", "creation_timestamp": "2026-10-01T22:59:09.997578Z"}, {"uuid": "157ac686-3501-49a8-9f61-8cc0cf3bedba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwtxrmjcge22", "content": "\ud83e\udd16 CVE-2026-104286 (CVSS 9.8): FortiMail zero-day exploited in the wild. Unauth path traversal \u2192 arbitrary file write. No patch yet; disable IBE or restrict mgmt access.\nhttps://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-fortimail-flaw-exploited-in-zero-day-attacks/", "creation_timestamp": "2026-10-01T23:04:13.854431Z"}, {"uuid": "ace1752d-8a3b-485f-8393-edfbafc36ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mwtybiuxeh25", "content": "FortiMail CVE-2026-104286, CVSS 9.8, lets unauthenticated attackers write files and is exploited as a zero-day. On CISA KEV. Patch to 7.4.9 or 7.6.7; 8.0.2 pending. Cannot patch? Disable IBE and lock down the admin interface. https://cti.securitycyber.uk", "creation_timestamp": "2026-10-01T23:13:07.313959Z"}, {"uuid": "a33c966b-8244-4519-9ee5-9e0e3dcdf4d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://t.me/BleepingComputer/25706", "content": "\u200aFortinet warns of critical FortiMail flaw exploited in zero-day attacks\n\nFortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. [...]\n\nhttps://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-fortimail-flaw-exploited-in-zero-day-attacks/", "creation_timestamp": "2026-10-01T23:20:23.000000Z"}, {"uuid": "ad02a345-4b88-4fd5-94ba-e0049c8b7601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mwu7bb34wh2v", "content": "\ud83d\udea8 NEW on CISA KEV \u2014 exploited in the wild\nFortinet FortiMail: Fortinet FortiMail Path Traversal Vulnerability\nCVE-2026-104286 \u00b7 patch by 2026-10-04\n\ud83d\udd17 https://ninjasignal.ninja/intel/cve/CVE-2026-104286\n#KEV #cybersecurity #infosec", "creation_timestamp": "2026-10-02T01:18:14.879707Z"}, {"uuid": "c0e3d0df-e4f0-4102-ada6-2a64a15ab503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mwubb2vszc4b", "content": "Fortinet\u3001\u30bc\u30ed\u30c7\u30a4\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308bFortiMail\u306e\u91cd\u5927\u306a\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\u8b66\u544a\uff1aCVE-2026-104286 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47886/", "creation_timestamp": "2026-10-02T01:54:34.368581Z"}, {"uuid": "164a7529-7918-4aff-ba00-1916718c0043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://t.me/VulnerabilityNews/44700", "content": "Fortinet warns of critical FortiMail flaw exploited in zero-day attacks\n\nFortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. [...]\nhttps://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-fortimail-flaw-exploited-in-zero-day-attacks/", "creation_timestamp": "2026-10-01T23:00:30.000000Z"}, {"uuid": "85ffe7e5-3e86-4646-9e14-2a01ab03576b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "exploited", "source": "https://t.me/BleepingComputer/25706", "content": "\u200aFortinet warns of critical FortiMail flaw exploited in zero-day attacks\n\nFortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. [...]\n\nhttps://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-fortimail-flaw-exploited-in-zero-day-attacks/", "creation_timestamp": "2026-10-01T23:20:23.000000Z"}, {"uuid": "f97b1dca-b4ec-4b67-b5dd-f9a21d6cee12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/newsfacts.bsky.social/post/3mwudc4rsxl2w", "content": "Kritieke FortiMail kwetsbaarheid actief uitgebuit door aanvallers\n\nEen ernstige kwetsbaarheid in FortiMail, aangeduid als CVE-2026-104286, wordt momenteel op grote schaal misbruikt. De kwetsbaarheid heeft een CVSS-score van 9.8 en stelt aanvallers in staat om bestanden te schr...", "creation_timestamp": "2026-10-02T02:30:19.719641Z"}, {"uuid": "c12b0150-a9a5-47bb-8954-ad34e731f932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwudceeq3423", "content": "Fortinet disclosed CVE-2026-104286, a critical FortiMail flaw with a 9.8 CVSS score, actively exploited in zero-day attacks to write files and run unauthorized code. #Fortinet #FortiMail #CVE-2026-104286", "creation_timestamp": "2026-10-02T02:30:26.969396Z"}, {"uuid": "e3b90de8-826e-48e6-8503-db9091cdc23b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "exploited", "source": "https://t.me/VulnerabilityNews/44700", "content": "Fortinet warns of critical FortiMail flaw exploited in zero-day attacks\n\nFortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. [...]\nhttps://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-fortimail-flaw-exploited-in-zero-day-attacks/", "creation_timestamp": "2026-10-01T23:00:30.000000Z"}, {"uuid": "919dce73-cc30-4bd4-b7cd-b3db9ad422f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://t.me/GithubRedTeam/104000", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-104286-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ShadowForge-Cyber\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-01 22:19:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-01T23:00:07.000000Z"}, {"uuid": "c3ed0a15-a7b4-4ede-b158-f754c750fd49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104000", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-104286-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ShadowForge-Cyber\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-01 22:19:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-01T23:00:07.000000Z"}, {"uuid": "fae12e0f-a403-4ad2-acb5-edfdfb14164b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwumpcnyfn2n", "content": "FortiMail\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3001\u8a8d\u8a3c\u306a\u3057\u3067\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u66f8\u304d\u8fbc\u307f\u3068\u30b3\u30fc\u30c9\u5b9f\u884c\u304c\u53ef\u80fd\u306b\n\nFortinet\u306f\u3001FortiMail\u306b\u5b58\u5728\u3059\u308b\u6df1\u523b\u306a\u8106\u5f31\u6027\u3092\u516c\u8868\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u8106\u5f31\u6027\u306f\u3059\u3067\u306b\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u8a8d\u8a3c\u3055\u308c\u3066\u3044\u306a\u3044\u30ea\u30e2\u30fc\u30c8\u306e\u653b\u6483\u8005\u306f\u3001\u7d30\u5de5\u3057\u305fHTTP\u307e\u305f\u306fHTTPS\u30ea\u30af\u30a8\u30b9\u30c8\u3092\u9001\u308b\u3053\u3068\u3067\u3001\u8106\u5f31\u306a\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306b\u4efb\u610f\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u66f8\u304d\u8fbc\u3081\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-104286\u300d\u3068", "creation_timestamp": "2026-10-02T05:18:45.462594Z"}, {"uuid": "31e59343-1e26-4bb2-afab-f935f90628e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104286", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mwuo3yq52s2m", "content": "\ud83d\udcf0 Fortinet Peringatkan Zero-Day Kritis FortiMail CVE-2026-104286 Aktif Dieksploitasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/02/fortimail-cve-2026-104286-zero-day/\n\n#cisa #cybersecurity #fortimail #fortinet #hacking #keamanan #keamananSiber #vulnerability #zero-day", "creation_timestamp": "2026-10-02T05:43:44.621404Z"}, {"uuid": "6898eec0-e687-492d-a2a6-f4e836562c5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mwuqqpaesg2g", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-104286: \u26a0\ufe0f CVE-2026-104286: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-104286-an-improper-limitation-of-a-pathname", "creation_timestamp": "2026-10-02T06:31:07.312817Z"}, {"uuid": "e80fc7d6-c7c4-4ec1-b406-9c53072f8fda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-34bc69a0-883a2eed23c33f94", "content": "U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Fortinet FortiMail flaw, tracked as CVE-2026-104286 (CVSS score of 9.8), to its Known Exploited Vulnerabilities (KEV) catalog. The flaw is a path traversal vulnerability that can be triggered through [\u2026]U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog", "creation_timestamp": "2026-10-02T06:33:27.794163Z"}, {"uuid": "6a74afd2-e342-49fc-bd37-9d142a7a4958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.poliverso.org.ap.brid.gy/post/3mwuqv3fqztp2", "content": "U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Fortinet FortiMail flaw, tracked as CVE-2026-104286 (CVSS score of 9.8), to its Known [\u2026]", "creation_timestamp": "2026-10-02T06:33:36.282323Z"}, {"uuid": "58cba76c-6a10-4522-ad87-dee08a994b5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/theperimetersite.bsky.social/post/3mwuqy72tqm2k", "content": "CISA put CVE-2026-104286 on the Known Exploited Vulnerabilities list yesterday, October 1, and if you use a Fortinet FortiMail appliance, you're on the clock. Federal agencies have until Sunday, October 4, to fix it.\n\n#vulnerability #phishing #infosec", "creation_timestamp": "2026-10-02T06:35:18.067160Z"}, {"uuid": "a5ccd3f6-6007-4b12-a54a-4733246c18f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwurjj63xc2f", "content": "\ud83d\udd34 FortiMail CVE-2026-104286 \u2014 zero-day under active attack\nCritical CVSS 9.8 flaw allows unauthenticated arbitrary file writes on vulnerable FortiMail systems. Fortinet confirmed exploitation and CISA added\nstemshop.top/blog/fortima...\n#CVE #CVE2026104286 #Fortinet #FortiMail #ZeroDay #CyberSecurity", "creation_timestamp": "2026-10-02T06:45:05.543599Z"}, {"uuid": "bf61bfb8-3407-480a-acf7-7d6ff9b0e982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://t.me/thehackernews/10222", "content": "\u203c\ufe0f WARNING: Attackers are exploiting a critical FortiMail flaw that allows unauthenticated arbitrary file writes.\n\nCISA added \"CVE-2026-104286\" to KEV. Fortinet published IOCs and workarounds, with fixes still pending for some versions.\n\nLearn more: https://thehackernews.com/2026/10/critical-fortimail-zero-day-flaw.html", "creation_timestamp": "2026-10-02T05:52:20.000000Z"}, {"uuid": "9e4cb32b-353e-4cf1-b582-3f608501a883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104286", "type": "seen", "source": "https://bsky.app/profile/trinity.sh/post/3mwutewgcnb2v", "content": "FortiMail zero-day CVE-2026-104286 is KEV-listed with a 48-hour remediation clock. Unauthenticated path traversal, CVSS 9.8. Workaround: disable IBE.\n\nhttps://trinity.sh/posts/2026-10-02-fortimail-cve-2026-104286-kev/", "creation_timestamp": "2026-10-02T07:18:12.655464Z"}, {"uuid": "16eec1ef-8ffc-4194-9ebc-31e7ac425f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://infosec.exchange/users/decio/statuses/117370087160211631", "content": "\u26a0\ufe0f  CVE-2026-104286 (https://vulnerability.circl.lu/vuln/CVE-2026-104286) \u2014 FortiMail, vuln\u00e9rabilit\u00e9 critique et d\u00e9j\u00e0 exploit\u00e9e comme 0-day.\nS\u2019il fallait encore des exemples sur le rythme auquel il faut d\u00e9sormais suivre les correctifs des \u00e9quipements expos\u00e9s : apr\u00e8s Cisco, Citrix, Zimbra\u2026 voil\u00e0 \u00e0 nouveau FortiMail. \ud83d\ude43\nSans authentification, un attaquant peut \u00e9crire des fichiers et ex\u00e9cuter du code via l\u2019interface de gestion.\n\"Bien \u00e9videmment\", il s\u2019agit d\u2019une bonne vieille travers\u00e9e de chemin .../.../...  :dumpster_fire_gif: \n\u27a1\ufe0f En attendant les versions corrig\u00e9es : d\u00e9sactiver IBE ou restreindre strictement l\u2019acc\u00e8s \u00e0 l\u2019interface d\u2019administration.\n\ud83e\ude79 \ud83d\udc47  https://fortiguard.fortinet.com/psirt/FG-IR-26-175\n#Fortinet #FortiMail #CVE", "creation_timestamp": "2026-10-02T07:16:42.816909Z"}, {"uuid": "9b69f2b6-c32d-40cc-8a10-4c294defe192", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "exploited", "source": "https://t.me/thehackernews/10222", "content": "\u203c\ufe0f WARNING: Attackers are exploiting a critical FortiMail flaw that allows unauthenticated arbitrary file writes.\n\nCISA added \"CVE-2026-104286\" to KEV. Fortinet published IOCs and workarounds, with fixes still pending for some versions.\n\nLearn more: https://thehackernews.com/2026/10/critical-fortimail-zero-day-flaw.html", "creation_timestamp": "2026-10-02T05:52:20.000000Z"}, {"uuid": "de85327e-3ece-48f4-95af-17bb5f759146", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/ikehjames25.bsky.social/post/3mwuwea43y22e", "content": "Fortinet FortiMail Zero-Day Actively Exploited, Urgent Action\u00a0Needed\n\nA critical path traversal vulnerability in Fortinet FortiMail, tracked as CVE-2026-104286, is under active exploitation. The zero-day could allow attackers to write arbitrary files and potentially achieve remote code execution.\u2026", "creation_timestamp": "2026-10-02T08:11:31.965953Z"}, {"uuid": "85f7af26-0939-4627-a695-25cd62125a79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwuwpwjj5d2e", "content": "\u60aa\u7528\u3055\u308c\u3066\u3044\u308bFortinet FortiMail\u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\u3001\u7dca\u6025\u306e\u5bfe\u5fdc\u304c\u5fc5\u8981\n\n\u7c73\u30b5\u30a4\u30d0\u30fc\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30fb\u30a4\u30f3\u30d5\u30e9\u30b9\u30c8\u30e9\u30af\u30c1\u30e3\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5e81\uff08CISA\uff09\u3068Fortinet\u306f\u6728\u66dc\u65e5\u3001FortiMail\u306e\u6df1\u523b\u306a\u8106\u5f31\u6027\u304c\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u8b66\u544a\u3092\u767a\u3057\u307e\u3057\u305f\u3002\u30d1\u30c3\u30c1\u306f\u307e\u3060\u516c\u958b\u3055\u308c\u3066\u3044\u307e\u305b\u3093\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u300cCVE-2026-104286\u300d\uff08CVSS\u30b9\u30b3\u30a29.8\uff09\u3068\u3057\u3066\u8ffd\u8de1\u3055\u308c\u3066\u3044\u308b\u30bc\u30ed\u30c7\u30a4\u3067\u3001", "creation_timestamp": "2026-10-02T08:18:03.382420Z"}, {"uuid": "6d8665db-da64-44d5-93f4-ce223bc5a63d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mwux4krjas2j", "content": "CVE-2026-104286 in FortiMail is actively exploited, enabling arbitrary file writes and potential code execution; CISA added it to KEV and urges rapid mitigation.\n", "creation_timestamp": "2026-10-02T08:25:07.563782Z"}, {"uuid": "8fa7a68d-ae08-40ee-ba22-b7847bdfebae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mwuyvfzncy2v", "content": "FortiMail\u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\uff08CVE-2026-104286\uff09\u304c\u60aa\u7528\u3055\u308c\u308b\u3001\u6df1\u523b\u5ea6\u306f\u6700\u5927\u7d1a\n\nFortinet\u306f\u3001\u540c\u793e\u306e\u30e1\u30fc\u30eb\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u300cFortiMail\u300d\u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027\uff08CVE-2026-104286\uff09\u304c\u653b\u6483\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u3057\u3066\u3001\u9867\u5ba2\u306b\u6ce8\u610f\u3092\u547c\u3073\u304b\u3051\u3066\u3044\u307e\u3059\u3002 Fortinet\u306b\u3088\u308b\u3068\u3001\u3053\u306e\u8106\u5f31\u6027\u306f\u5b9f\u969b\u306e\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u306e\u5831\u544a\u304c\u3042\u308a\u307e\u3059\u3002\u540c\u793e\u306f\u3001\u4fee\u6b63\u7248\u304c\u516c\u958b\u3055\u308c\u308b\u307e\u3067\u306e\u9593\u3001\u6848\u5185\u3057", "creation_timestamp": "2026-10-02T08:56:55.000281Z"}, {"uuid": "d1953076-89d5-4995-b5f0-492f99b3c731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mwuyxouyoc2g", "content": "Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)\n\n\ud83d\udd17 Read more: www.helpnetsecurity.com/2026/10/02/f...\n\n#zeroday #vulnerability #cybersecurity", "creation_timestamp": "2026-10-02T08:58:14.078449Z"}, {"uuid": "4346f010-aea3-4fa9-98a0-2753aed8496a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://t.me/information_security_channel/56030", "content": "Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action\nhttps://www.securityweek.com/exploited-fortinet-fortimail-zero-day-calls-for-urgent-action/\n\nCVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.\nThe post Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action (https://www.securityweek.com/exploited-fortinet-fortimail-zero-day-calls-for-urgent-action/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-10-02T08:35:02.000000Z"}, {"uuid": "945338d6-2f6b-4bda-8b26-b5c57372be08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "MISP/90e10360-cce6-49fe-aec9-98d07905ae17", "content": "", "creation_timestamp": "2026-10-02T09:07:16.000000Z"}, {"uuid": "6cb7507f-6226-4569-bc7d-e3a52a633d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwuzwj3okc23", "content": "CISA added CVE-2026-104286 to its KEV catalog after active exploitation of a critical FortiMail zero-day. The flaw lets unauthenticated attackers write arbitrary files via crafted HTTP/HTTPS requests. #FortiMail #CVE2026104286 #Fortinet", "creation_timestamp": "2026-10-02T09:15:25.884624Z"}, {"uuid": "ed09d5ba-0a7b-44e3-a731-237f72fe6891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mwuzzbohjn26", "content": "Fortinet has disclosed a critical zero-day vulnerability in FortiMail, tracked as CVE-2026-104286, with a CVSS score of 9.8. Attackers can exploit this flaw to write files on affected devices without credentials. The vulnerability stems from path traversal and improper NULL byte handling.", "creation_timestamp": "2026-10-02T09:16:58.565115Z"}, {"uuid": "0e7b63c6-74c7-4713-a1e5-45da02307276", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://infosec.exchange/ap/users/117064736050780246/statuses/117369471039083597", "content": "Fortinet FortiMail management interface is impacted by CVE-2026-104286 (CVSS 9.8), exploited in the wild as zero-day for unauthenticated system file writes and command execution. Internet-exposed instances face immediate full-compromise risk; isolate management and patch urgently. #Fortinet #ZeroDay #ThreatIntel\nhttps://cyberworldops.eu/en/fortimail-zero-day-gives-unauthenticated-attackers-a-route-to-system", "creation_timestamp": "2026-10-02T09:35:52.446427Z"}, {"uuid": "25940ca3-17ab-47f2-9210-f53932968601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mwv366ow2o2v", "content": "FortiMail\u306e\u30bc\u30ed\u30c7\u30a4\u8106\u5f31\u6027(CVE-2026-104286)\u304c\u60aa\u7528\u3055\u308c\u3001\u672a\u8a8d\u8a3c\u306e\u653b\u6483\u8005\u306b\u3088\u308b\u4efb\u610f\u30d5\u30a1\u30a4\u30eb\u66f8\u304d\u8fbc\u307f\u304c\u53ef\u80fd\u3002CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u8106\u5f31\u6027\u306b\u8ffd\u52a0\u3002", "creation_timestamp": "2026-10-02T09:37:36.847404Z"}, {"uuid": "7de63da9-7970-41ea-bfe4-07f90adac655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "exploited", "source": "https://t.me/information_security_channel/56030", "content": "Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action\nhttps://www.securityweek.com/exploited-fortinet-fortimail-zero-day-calls-for-urgent-action/\n\nCVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.\nThe post Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action (https://www.securityweek.com/exploited-fortinet-fortimail-zero-day-calls-for-urgent-action/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-10-02T08:35:02.000000Z"}, {"uuid": "56ccabf1-34b2-4cf5-9412-f89ead5d0b1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104286", "type": "seen", "source": "https://swecyb.com/ap/users/116080658609901341/statuses/117370726671341732", "content": "(truesec.com) Critical Path Traversal Vulnerability in FortiMail (CVE-2026-104286) Actively Exploited in the Wild\nIn brief - This article details a critical path traversal vulnerability (CVE-2026-104286) in FortiMail that is currently being exploited in the wild to gain unauthorized system access.\nTechnically - This article describes a flaw involving path traversal and improper neutralization of NULL byte characters, allowing unauthenticated attackers to write arbitrary files to the underlying OS via crafted HTTP/HTTPS requests. This primitive enables remote code execution (RCE) and full gateway compromise. Affected versions include FortiMail 7.2 through 8.0.1; recommended mitigations include disabling IBE feature support via CLI or restricting management interface access. Detection is supported through specific system logs and IOCs, including modified binaries like /bin/smit and the addition of ld.so.preload.\nSource: https://www.truesec.com/hub/blog/cve-2026-104286-fortimail-path-traversal-vulnerability-actively-exploited\n#ThreatIntelligence #ThreatIntel #Cybersecurity #Infosec", "creation_timestamp": "2026-10-02T10:00:08.897386Z"}, {"uuid": "b11757ad-d992-4405-8814-be145cc9e015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mwv4rl5cv22g", "content": "Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)\n\nwww.helpnetsecurity.com/2026/10/02/f...\n\n#Cybersecurity #Cyber #SituationalAwareness", "creation_timestamp": "2026-10-02T10:06:22.236156Z"}, {"uuid": "667ff912-df4a-4fc0-a00b-93db33c27d3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mwv6hafgtf2i", "content": "Critical Threat Advisory: CVE-2026-104286 Fortinet\u00a0FortiMail\n\nImmediate CISA KEV threat advisory for CVE-2026-104286 affecting Fortinet FortiMail. Includes behavioral workflow analysis, BOD 26-04 patch compliance guidance, and multi-vendor SOC detection queries....\n\nhttps://thecybermind.co/t645", "creation_timestamp": "2026-10-02T10:36:22.694654Z"}, {"uuid": "6067be3a-5631-4f90-a27e-09f26d3fcdc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mwv7scjvhc23", "content": "Fortinet reports active exploitation of CVE-2026-104286 in FortiMail, a zero-day path traversal flaw enabling arbitrary file writes via crafted HTTP or HTTPS requests. CISA has added it to the KEV catalog. #Fortinet #FortiMail #CVE2026104286", "creation_timestamp": "2026-10-02T11:00:28.673961Z"}, {"uuid": "df6f4516-e940-42e1-b9ed-e8b20f651578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/raven-sec.bsky.social/post/3mwv7zdtzz7e6", "content": "FortiMail zero-day CVE-2026-104286 actively exploited while a 16-year-old KillSec mastermind faces arrest.\n\n\u2022 Fortinet warns CVE-2026-104286 in FortiMail is actively exploited in zero-day attacks.\n\nhackingallthethings.com/threatbits/0ce861d6\n#infosec #threatintel", "creation_timestamp": "2026-10-02T11:04:25.044168Z"}, {"uuid": "96b2f27a-cccf-49cf-96c4-2594dec6ce9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104286", "type": "seen", "source": "https://bsky.app/profile/redoracle.com/post/3mwva27lmoh2x", "content": "Critical FortiMail zero-day exploited in the wild (CVE-2026-104286) https://redoracle.com/News/critical-fortimail-zero-day-exploited-in-the-wild-cve-2026-104286.html #data #2026 #fortimail", "creation_timestamp": "2026-10-02T11:04:51.945855Z"}, {"uuid": "61b9fecc-3379-4ef4-ab9a-ddef7c9928f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/yasna.io/post/3mwva557te42h", "content": "A critical FortiMail zero-day vulnerability allowing unauthenticated file writes is actively exploited, affecting users still awaiting patches.\n\nCVE-2026-104286 #ZeroDay #CVE #infosec\n\nFull synthesis & sources: yasna.io", "creation_timestamp": "2026-10-02T11:06:30.732739Z"}, {"uuid": "12502622-5194-4f66-b348-223e00c9c28f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwvajgm3l52e", "content": "\ud83e\udd16 CVE-2026-104286 (CVSS 9.8): critical FortiMail zero-day, exploited in the wild. Unauthenticated arbitrary file write \u2192 code exec. In CISA KEV, patch now.\nhttps://www.bleepingcomputer.com/news/security/fortinet-warns-of-critical-fortimail-flaw-exploited-in-zero-day-attacks/", "creation_timestamp": "2026-10-02T11:13:23.162698Z"}, {"uuid": "2f93fc09-5c15-4b65-b81d-421adfb39348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/infrajump.bsky.social/post/3mwvaxk6rix2a", "content": "Fortinet warns CVE-2026-104286 is being exploited against FortiMail. CVSS 9.8, unauthenticated file writes, no fix released yet. Disable IBE or restrict management access.\n\nfortiguard.fortinet.com/FG-IR-26-175\n\n#Fortinet #DevSecOps", "creation_timestamp": "2026-10-02T11:21:16.283285Z"}, {"uuid": "fab24d5a-2e81-4e11-b11f-fd4344a86896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-32", "content": "", "creation_timestamp": "2026-10-01T22:03:35.000000Z"}, {"uuid": "e72b51bc-732e-4653-ab9a-647e8055186f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://www.acn.gov.it/portale/w/fortinet-rilevato-sfruttamento-in-rete-della-cve-2026-104286-relativa-a-fortimail", "content": "", "creation_timestamp": "2026-10-01T23:36:41.000000Z"}, {"uuid": "7d19b66f-b1ff-4de5-87bc-cfc2d8a8f95d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0398", "content": "", "creation_timestamp": "2026-10-02T00:21:47.000000Z"}, {"uuid": "2c6c2cc3-8338-45b9-8fa4-de55ccd8942e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://www.cert.se/2026/10/kritisk-sarbarhet-i-fortimail.html", "content": "", "creation_timestamp": "2026-10-02T04:30:00.000000Z"}, {"uuid": "e758789d-51b2-4147-ac3b-876d747bb88b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/fortinet-security-advisory-av26-989", "content": "", "creation_timestamp": "2026-10-02T04:37:41.000000Z"}, {"uuid": "f216d0f8-c7a5-4852-8226-ab3db9d3dd0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mwveyxkr332q", "content": "~Cybergcca~\nCVE-2026-104286 is actively exploited; update affected FortiMail versions.\n-\nIOCs: CVE-2026-104286\n-\n#CVE-2026-104286 #Fortinet #ThreatIntel", "creation_timestamp": "2026-10-02T12:33:39.635405Z"}, {"uuid": "2e0d626f-20a8-4f7b-bff0-4e99d94582ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mwvfsyhqsk23", "content": "CVE-2026-104286 is trending. Hype score 3, currently #9 on cvemon.\n\nAn improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-104286", "creation_timestamp": "2026-10-02T12:48:11.964936Z"}, {"uuid": "65e48cf2-9ee7-4161-93e5-1c6f8b5d3af0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "published-proof-of-concept", "source": "Telegram/j-aKC2ml7EomAxhquF7REKiO_kjGtNOipYIZuG_ATMxWiqo", "content": "", "creation_timestamp": "2026-10-02T03:00:14.000000Z"}, {"uuid": "37e21f2b-b9d7-43ea-ba8a-a64d79d53379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104286", "type": "seen", "source": "https://bsky.app/profile/thecybersecguru.com/post/3mwvhf6fk6q2k", "content": "Critical Fortinet FortiMail Zero-Day (CVE-2026-104286) Actively Exploited: Unauthenticated File Write Flaw Exposes Email Security Gateways\u00a0Worldwide\n\nCVE-2026-104286 is an actively exploited FortiMail zero-day allowing\u2026\n\nhttps://thecybersecguru.com/exploits/fortimail-cve-2026-104286-zero-day/", "creation_timestamp": "2026-10-02T13:16:16.747686Z"}, {"uuid": "6e04c5a5-13a6-4403-bfd9-c6e0ec4a0b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mwvks6tfz62m", "content": "Fortinet warns of critical zero-day (CVE-2026-104286) in FortiMail, actively exploited for RCE. CVSS 9.8. CISA added to KEV. Patches are pending, but urgent workarounds are available. #Fortinet #ZeroDay #CVE2026104286 #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-10-02T14:17:14.764369Z"}, {"uuid": "4b1d5c8c-283e-4a1a-ac02-b6b0542e1b98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104286", "type": "seen", "source": "https://bsky.app/profile/etairos-ai.bsky.social/post/3mwvkyjukhz23", "content": "FortiMail zero-day CVE-2026-104286 is under active exploitation and no patch exists yet.\nYour email gateway is the perimeter. Mitigate and hunt now, not after a fix ships.\n#ThreatIntel #CyberSecurity\nhttps://threat-intelligence.redeyesecurity.com/blog/fortimail-zero-day-cve-2026-104286-2026", "creation_timestamp": "2026-10-02T14:20:47.564951Z"}, {"uuid": "26533c11-5274-4f5d-b95a-55aab75bfd41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3419", "content": "\ud83d\udd34 Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation.\n\nThe vulnerability, tracked as CVE-2026-104286 (CVSS score: 9.8), allows unauthenticated attackers to write arbitrary files on the underlying system.\n\n\"An improper limitation of a pathname to a restricted directory ('path traversal') [CWE-22] and improper neutralization of NULL byte or NULL character [CWE-158] vulnerability may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests,\" Fortinet said in an advisory.", "creation_timestamp": "2026-10-02T12:28:05.000000Z"}, {"uuid": "6d607175-5488-4a3b-97f4-034b33a56d1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://t.me/GithubRedTeam/104065", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a fortimail-zero-day-cve-2026-104286\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a techupdate24\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-02 12:48:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA complete guide and workflow for integrating Agile sprints with DevOps CI/CD pipelines.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-02T13:00:08.000000Z"}, {"uuid": "71cc9f00-ec4d-4caf-bb47-2611aad97171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mwvn6tszfv2m", "content": "\ud83d\udd17 CVE : CVE-2026-104286", "creation_timestamp": "2026-10-02T15:00:05.949943Z"}, {"uuid": "b125b805-ca61-4047-a023-b1b8c810df7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mwvnlccqoi23", "content": "FortiMail zero-day CVE-2026-104286 lets unauthenticated attackers write files. Mitigate ASAP. #Cybersecurity #Vulnerability #ZeroDay #FortiMail #InfoSec #EmailSecurity thedailytechfeed.com/urgent-zero-...", "creation_timestamp": "2026-10-02T15:07:04.263403Z"}, {"uuid": "e60cb6e0-e663-4812-9cce-59fd2c552e04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "MISP/ed9ad3e1-d3bf-44bc-8c79-9b1fc54984ff", "content": "", "creation_timestamp": "2026-10-02T12:17:18.000000Z"}, {"uuid": "0f5955ce-e6a1-44e8-af64-bd2dbc288d07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "exploited", "source": "Telegram/0u7KujwaN80mEaWYud7wT6bH6b5AC_xzHTFjk9I5Y2ZTrQ", "content": "", "creation_timestamp": "2026-10-02T06:21:09.000000Z"}, {"uuid": "244e94f8-64ee-442a-bf02-496fe92db50e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "exploited", "source": "https://t.me/true_secator/8672", "content": "Fortinet \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 0-day \u0430\u0442\u0430\u043a\u0430\u0445 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\nCVE-2026-104286 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f, \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,8, \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f FortiMail.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0443\u0442\u0438 \u0438 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0431\u0430\u0439\u0442\u0430 \u0438\u043b\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0441\u0438\u043c\u0432\u043e\u043b\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0431\u0430\u0437\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP- \u0438\u043b\u0438 HTTPS-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0413\u0432\u0435\u043d\u0434\u0430\u043b\u044c \u0413\u0435\u043d\u044c\u043e \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Fortinet. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 FortiMail \u0432\u0435\u0440\u0441\u0438\u0439 8.0.0-8.0.1, 7.6.0-7.6.6, 7.4.0-7.4.8 \u0438 7.2.0-7.2.9.\n\nFortinet \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u0434\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 FortiMail 7.2 \u043c\u043e\u0433\u0443\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043d\u043e\u0432\u0438\u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0434\u043e \u0432\u0435\u0442\u043a\u0438 7.4 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438. \u0414\u043b\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a FortiMail 7.4, 7.6 \u0438 8.0 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u043a\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b. FortiMail 7.4.9, 7.6.7 \u0438 8.0.2 \u0443\u043a\u0430\u0437\u0430\u043d\u044b \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u044f\u0449\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u041f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u044f\u0432\u044f\u0442\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438, Fortinet \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0432 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 IBE. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f FortiMail \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0438\u043b\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u0447\u0430\u0441\u0442\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Fortinet \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 IOCs, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0444\u0430\u0439\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u044b \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u0443\u043a\u0430\u0437\u0430\u043b\u0430 IP-\u0430\u0434\u0440\u0435\u0441\u0430 79[.]141.169.187, 45[.]129.0.192, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0430\u0442\u0430\u043a\u0430\u043c\u0438.\n\n\u0412 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u0441\u044f \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u0447\u0435\u0442\u043d\u0430\u044f \u0437\u0430\u043f\u0438\u0441\u044c \u0430\u0440\u0445\u0438\u0432\u0430 archive234 \u0431\u044b\u043b\u0430 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u0430 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0441 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 79.141.169.187 \u0438 /uploads \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430.\n\n\u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u043b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e FortiMail \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0430\u0440\u0445\u0438\u0432\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440.\n\n\u0412 \u0447\u0438\u0441\u043b\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0432 \u0436\u0443\u0440\u043d\u0430\u043b\u0435 - \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u0437\u0430\u0434\u0430\u043d\u0438\u044f cron, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0435 \u0441 [/migadmin \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u0437\u0430\u0434\u0430\u0447\u0443], \u0441\u043e\u0431\u044b\u0442\u0438\u0435 \u0432\u044b\u0445\u043e\u0434\u0430 \u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u043e\u0448\u0438\u0431\u043a\u0430 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 IBE \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u043e\u0439 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0438 Base64 \u0438 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u044b\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\nFortinet \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u043a\u043e\u0433\u0434\u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u0431\u044b\u043b\u0430 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u044b\u043b\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0438 \u043a\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u0437\u0430 \u0430\u0442\u0430\u043a\u0430\u043c\u0438. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u0443\u0435\u0442 \u0441\u0432\u043e\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0430\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CISA, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0435\u0435 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0432\u043e\u0439 KEV.", "creation_timestamp": "2026-10-02T12:33:14.000000Z"}, {"uuid": "bd14522e-5ccf-4228-b13c-92cdced910c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117372183879240497", "content": "Fortinet has a couple of advisories today, one pertaining to a critical vulnerability.\nCRITICAL: CVE-2026-104286 - Improper Pathname Restriction Allows Unauthenticated Arbitrary File Write in Fortinet FortiMail https://app.opencve.io/cve/CVE-2026-104286\nMore:\nInfosecurity-Magazine: Fortinet sounds the alarm over actively exploited FortiMail zero-day https://www.theregister.com/security/2026/10/02/fortinet-sounds-the-alarm-over-actively-exploited-fortimail-zero-day/5300803 #infosec #Fortinet #vulnerability #zeroday", "creation_timestamp": "2026-10-02T16:09:56.241698Z"}, {"uuid": "79607140-8493-498f-9bbc-d3038dfe21c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117372188822300600", "content": "Fortinet has a couple of advisories today, one pertaining to a critical vulnerability.\nCRITICAL: CVE-2026-104286 - Improper Pathname Restriction Allows Unauthenticated Arbitrary File Write in Fortinet FortiMail https://app.opencve.io/cve/CVE-2026-104286\nMore:\nThe Register: Fortinet sounds the alarm over actively exploited FortiMail zero-day https://www.theregister.com/security/2026/10/02/fortinet-sounds-the-alarm-over-actively-exploited-fortimail-zero-day/5300803 @theregister @carlypage  #infosec #Fortinet #zeroday #vulnerability", "creation_timestamp": "2026-10-02T16:11:11.666515Z"}, {"uuid": "f449be69-cf02-41b6-b5a1-200d9eacccac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "exploited", "source": "https://t.me/CyberSecurityIL/87563", "content": "\u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 \u05dc\u05e9\u05ea\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea:\n\n- \u05d7\u05d1\u05e8\u05ea Fortinet \u05de\u05d6\u05d4\u05d9\u05e8\u05d4 \u05de\u05e4\u05e0\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea CVE-2026-104286 \u05d1-FortiMail, \u05e9\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05dc\u05d4\u05e8\u05d9\u05e5 \u05e7\u05d5\u05d3 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea. \n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05db\u05d1\u05e8 \u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\u05d5\u05d3 \u05e4\u05e8\u05d8\u05d9\u05dd \u05d7\u05e9\u05d5\u05d1\u05d9\u05dd \u05d6\u05de\u05d9\u05e0\u05d9\u05dd \u05db\u05d0\u05df. \n\n- \u05d7\u05d1\u05e8\u05ea Dell \u05de\u05e4\u05e8\u05e1\u05de\u05ea \u05ea\u05d9\u05e7\u05d5\u05e0\u05d9\u05dd \u05dc\u05e9\u05ea\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1-CSM. \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05dc\u05d4\u05e9\u05d9\u05d2 \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05d0\u05d3\u05de\u05d9\u05df \u05dc\u05dc\u05d0 \u05e6\u05d5\u05e8\u05da \u05d1\u05d4\u05d6\u05d3\u05d4\u05d5\u05ea.\n\nhttps://t.me/CyberSecurityIL/9575", "creation_timestamp": "2026-10-02T15:09:26.000000Z"}, {"uuid": "175f437c-3bbe-4479-8944-30cc1800dd7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "exploited", "source": "https://t.me/CyberSecurityIL/9575", "content": "\u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 \u05dc\u05e9\u05ea\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea:\n\n- \u05d7\u05d1\u05e8\u05ea Fortinet \u05de\u05d6\u05d4\u05d9\u05e8\u05d4 \u05de\u05e4\u05e0\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea CVE-2026-104286 \u05d1-FortiMail, \u05e9\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05dc\u05d4\u05e8\u05d9\u05e5 \u05e7\u05d5\u05d3 \u05dc\u05dc\u05d0 \u05d4\u05d6\u05d3\u05d4\u05d5\u05ea. \n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 \u05db\u05d1\u05e8 \u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\u05d5\u05d3 \u05e4\u05e8\u05d8\u05d9\u05dd \u05d7\u05e9\u05d5\u05d1\u05d9\u05dd \u05d6\u05de\u05d9\u05e0\u05d9\u05dd \u05db\u05d0\u05df. \n\n- \u05d7\u05d1\u05e8\u05ea Dell \u05de\u05e4\u05e8\u05e1\u05de\u05ea \u05ea\u05d9\u05e7\u05d5\u05e0\u05d9\u05dd \u05dc\u05e9\u05ea\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05d5\u05ea \u05d1-CSM. \u05d4\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05de\u05d0\u05e4\u05e9\u05e8\u05d5\u05ea \u05dc\u05d4\u05e9\u05d9\u05d2 \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05d0\u05d3\u05de\u05d9\u05df \u05dc\u05dc\u05d0 \u05e6\u05d5\u05e8\u05da \u05d1\u05d4\u05d6\u05d3\u05d4\u05d5\u05ea.\n\nhttps://t.me/CyberSecurityIL/9575", "creation_timestamp": "2026-10-02T15:09:26.000000Z"}, {"uuid": "308f4a7d-bf6a-4472-8c0b-8329447632d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mwvv2dqsul2g", "content": "\ud83d\udd34 CVE-2026-104286 - Critical (9.8)\n\nAn improper limitation of a pathname to a restricted directory ('path traversal') vulnerability i...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-104286/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-02T17:20:45.892935Z"}, {"uuid": "d30a34c2-7e2c-490f-9b3b-3436e0c096ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/jbzfn.bsky.social/post/3mww2m6jihx26", "content": "\ud83d\udea8 Fortinet sounds the alarm over actively exploited FortiMail zero-day\n\n\uff62 The flaw, tracked as CVE-2026-104286, carries a CVSS score of 9.8 and affects multiple versions of Fortinet's email security platform \uff63\n\nwww.theregister.com/security/202...\n\n#fortinet #fortimail #cybersecurity", "creation_timestamp": "2026-10-02T19:00:12.650495Z"}, {"uuid": "b2d3e5b9-da01-4dcc-bf99-0835beca2fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mww3c2w4ks27", "content": "6/7 Patch alert: Fortinet FortiMail zero-day (a flaw with no fix yet) CVE-2026-104286, rated 9.8/10, is exploited. Disable IBE, hide management access. CISA deadline: Oct 4. via Help Net Security", "creation_timestamp": "2026-10-02T19:12:26.667310Z"}, {"uuid": "b7bd0420-3469-49cd-9fde-1230590aa53b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mww3c2wgdc27", "content": "6/7 Patch alert: Fortinet FortiMail zero-day (a flaw with no fix yet) CVE-2026-104286, rated 9.8/10, is exploited. Disable IBE, hide management access. CISA deadline: Oct 4. via Help Net Security", "creation_timestamp": "2026-10-02T19:12:27.121568Z"}, {"uuid": "b0092dd2-d9e4-4d63-bf8a-a8eb61537a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mww3c2whck27", "content": "6/7 Patch alert: Fortinet FortiMail zero-day (a flaw with no fix yet) CVE-2026-104286, rated 9.8/10, is exploited. Disable IBE, hide management access. CISA deadline: Oct 4. via Help Net Security", "creation_timestamp": "2026-10-02T19:12:27.561230Z"}, {"uuid": "47b6895c-966c-4245-86ca-d022f749c396", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mww3c2wibs27", "content": "6/7 Patch alert: Fortinet FortiMail zero-day (a flaw with no fix yet) CVE-2026-104286, rated 9.8/10, is exploited. Disable IBE, hide management access. CISA deadline: Oct 4. via Help Net Security", "creation_timestamp": "2026-10-02T19:12:28.000398Z"}, {"uuid": "5ef0b0d2-2a4d-4c0d-99f6-e1923a079c49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mww3c2wjb227", "content": "6/7 Patch alert: Fortinet FortiMail zero-day (a flaw with no fix yet) CVE-2026-104286, rated 9.8/10, is exploited. Disable IBE, hide management access. CISA deadline: Oct 4. via Help Net Security", "creation_timestamp": "2026-10-02T19:12:28.478235Z"}, {"uuid": "b8ea8957-b3ee-48bc-a1ab-507b9bc128c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mww3c2wkac27", "content": "6/7 Patch alert: Fortinet FortiMail zero-day (a flaw with no fix yet) CVE-2026-104286, rated 9.8/10, is exploited. Disable IBE, hide management access. CISA deadline: Oct 4. via Help Net Security", "creation_timestamp": "2026-10-02T19:12:28.947534Z"}, {"uuid": "ab31b551-a57a-41d5-82c3-a1b555095b2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/sergioiker.bsky.social/post/3mww3c2wl7k27", "content": "6/7 Patch alert: Fortinet FortiMail zero-day (a flaw with no fix yet) CVE-2026-104286, rated 9.8/10, is exploited. Disable IBE, hide management access. CISA deadline: Oct 4. via Help Net Security", "creation_timestamp": "2026-10-02T19:12:29.404557Z"}, {"uuid": "22c9c396-23d2-4edd-8f4b-fb264ed6760d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a66b618f-aae5-401b-b529-f7b0c130cdcb", "content": "", "creation_timestamp": "2026-10-02T20:00:45.002905Z"}, {"uuid": "04c39ef6-cf31-449e-b1b7-3265ec54a4d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mwwdlxb2nh2m", "content": "\ud83d\udea8 Fortinet reports CVE-2026-104286 is being exploited in the wild.\n\nCensys observes ~2,800 Internet-exposed FortiMail hosts, excluding honeypots. No fixed builds are available yet.\n\nCensys ARC advisory: https://bit.ly/4htjUkY ", "creation_timestamp": "2026-10-02T21:41:34.005498Z"}, {"uuid": "8bc7d34e-78d8-4524-8c16-0424328614c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/cybernewsdaily.bsky.social/post/3mwwjgqk55t24", "content": "Fortinet FortiMail flaw CVE-2026-104286 actively exploited, allowing arbitrary file writes\n\nSponsor this channel today. https://www.ProNetGrowth.com/?utm_source=bluesky&utm_medium=post&utm_campaign=news-cybersecurity&utm_content=cybersecurity\n\n#cybersecurity #hacking", "creation_timestamp": "2026-10-02T23:25:36.890113Z"}]}