🚨FortiMail Bug Allows File Writes Without Login
Critical FortiMail Bug Exploited, Patch Now
TL;DR
A critical FortiMail bug (CVE-2026-104286) allows attackers to write files without logging in, affecting multiple versions. CISA directs agencies to apply mitigations by Oct 4.
A critical bug in FortiMail (CVE-2026-104286) allows attackers to write files to vulnerable systems without logging in. This is a big deal for any organization using FortiMail, as it can lead to unauthorized code execution. The vulnerability affects multiple versions, including 8.0.0 through 8.0.1, 7.6.0 through 7.6.6, and others. CISA has added this to its Known Exploited Vulnerabilities catalog and directs agencies to apply mitigations by October 4. Fortinet recommends disabling Identity Based Encryption and restricting access to trusted networks.
Key Points
FortiMail bug (CVE-2026-104286) allows attackers to write files without logging in, CVSS score 9.8.
Vulnerability affects FortiMail versions 8.0.0 through 8.0.1, 7.6.0 through 7.6.6, and others.
US CISA directs federal civilian agencies to apply mitigations by October 4, 2023.
Fortinet recommends disabling Identity Based Encryption if not required and restricting access to trusted networks.
Fortinet provides indicators for hunting signs of compromise, including suspicious files and configuration changes.
Why It Matters
If you're using FortiMail, this bug is a big deal. It allows attackers to write files without logging in, potentially leading to unauthorized code execution. The vulnerability affects multiple versions, and CISA is directing agencies to apply mitigations by October 4. Fortinet recommends disabling Identity Based Encryption and restricting access to trusted networks.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,567 builders reading daily.