FortiMail Zero-Day: CVSS 9.8, 3-Day CISA Deadline [2026]
A critical flaw in Fortinet’s FortiMail secure email gateway is now confirmed under active attack, and the window for patching it is shorter than almost any similar bug this year. CVE-2026-104286, rated 9.8 out of 10 on the CVSS scale, lets an unauthenticated attacker write arbitrary files to a vulnerable FortiMail appliance using nothing more…