Advisoriesby IbisFortinetCVE-2026-104286
Fortinet FortiMail: path traversal
Critical9.8CVE-2026-104286 · Published Oct 1, 2026 · updated Oct 2, 2026
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| FortiMail Product | <= 8.0.0 | No fix yet |
| >= 7.6.0, <= 7.6.5 | No fix yet | |
| >= 7.4.0, <= 7.4.6 | No fix yet | |
| >= 7.2.0, <= 7.2.9 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-22
More Fortinet advisories
All Fortinet| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 22 | Fortinet FortiPAM Chrome Extension: information disclosure | Critical9.6 | No fix yet |
| Sep 11 | Fortinet FortiMonitorOnSight: information disclosure | Critical9.8 | No fix yet |
| Sep 8 | Fortinet FortiSOAR PaaS: improper access control | Medium5.4 | No fix yet |
| Sep 8 | Fortinet FortiClientWindows: improper access control | Medium5.1 | No fix yet |
| Sep 8 | Fortinet FortiSandbox: command injection | High7.2 | No fix yet |
| Sep 8 | Fortinet FortiSIEM: open redirect | Low3.1 | No fix yet |