Fortinet has disclosed a critical flaw in its FortiMail email security platform, tracked as CVE-2026-104286, warning that attackers are already using it in zero-day attacks. The flaw lets an intruder run harmful code or commands on affected appliances, handing them a foothold inside an organization's mail infrastructure. Fortinet is urging customers to apply the available fix immediately given the ongoing in-the-wild activity.
// source: bleepingcomputer.com ↗