CWE-158

Critical Fortinet FortiMail Path Traversal and Null Byte Flaw Exploited to Achieve Unauthenticated Remote Code Execution (CVE-2026-104286)

A critical zero-day flaw in Fortinet FortiMail secure email gateways allows unauthenticated remote attackers to write arbitrary files and execute code as root.