Vulnerability in Fortinet FortiMail (October 2, 2026)
CERT-FR Notice
Subject: Vulnerability in Fortinet FortiMail
Document Management
Detailed version management is found at the end of this document.
Risk
- Remote arbitrary code execution
Affected Systems
- FortiMail versions after 7.2.0 and before branch 7.4
- FortiMail versions after 7.4.0 and before upcoming 7.4.9
- FortiMail versions after 7.6.0 and before upcoming 7.6.7
- FortiMail versions after 8.0.0 and before upcoming 8.0.2
Summary
A vulnerability has been discovered in Fortinet FortiMail. It allows an attacker to cause remote arbitrary code execution.
Fortinet indicates that the vulnerability CVE-2026-104286 is actively being exploited. Indicators of compromise are available in the vendor's notice.
Solutions
Refer to the vendor's security bulletin to obtain patches (see Documentation section).
Documentation
-
Fortinet Security Bulletin FG-IR-26-175 of October 1, 2026
https://www.fortiguard.com/psirt/FG-IR-26-175 -
CVE Reference CVE-2026-104286
https://www.cve.org/CVERecord?id=CVE-2026-104286
How it works
Once you click Generate, Ollama reads this article and crafts 5 comprehension questions. Your answers are graded against the article content — general knowledge won't be enough. Score 70+ to count toward your certificate.
Questions are cached — you'll always get the same 5 for this article.