Fortinet FortiMail path traversal exploited (CVE-2026-104286)
CISA says CVE-2026-104286, a critical FortiMail flaw allowing unauthenticated file writes, is exploited. See affected versions, due date and steps to take.
-
-
FortiClient EMS Systems Under Cyberattack
The cybersecurity landscape is currently facing a severe threat as The Shadowserver Foundation has issued an urgent warning regarding FortiClient Enterprise Management Server (EMS) instances. Over 2,000 publicly accessible FortiClient EMS instances have been identified globally, with two already confirmed to be actively exploited through critical unauthenticated remote code execution (RCE) vulnerabilities. This situation demands…
-
Fortinet FortiClient EMS Zero-Day Actively Exploited
Fortinet has issued an emergency hotfix following the disclosure of a critical zero-day vulnerability in its FortiClient EMS product. This flaw, actively exploited by threat actors in the wild, poses a severe risk to organizations, particularly those with internet-exposed deployments of FortiClient EMS. Understanding the Critical FortiClient EMS Zero-Day Tracked as CVE-2026-35616 and assigned a…
End of content
End of content