CVE-2026-104286

Fortinet's advisory of 1 October describes two weaknesses in one request: a path traversal and improper handling of the null byte. Together they let an unauthenticated attacker write files anywhere on a mail gateway that exists to face the internet. It is exploited, it scores 9.8, and the 7.2 branch has no fix at all.

1 article — 2026-10-02

Authoritative record

Root Notes reports on this identifier; it does not maintain it. For the vendor advisory, the affected versions and the scoring, NVD and MITRE hold the primary records.

Our coverage

FortiMail's path check and its file write disagree about where a filename ends, and attackers are already there

2026-10-02Security

../cve — every identifier we have covered