SB2026100186 - Path traversal in FortiMail

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026100186

SB2026100186 - Path traversal in FortiMail

Published: October 1, 2026

Security Bulletin ID SB2026100186
CSH Severity
Critical
Patch available
NO
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Critical 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Path traversal (CVE-ID: CVE-2026-104286) Exploited

CWE-ID: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVSSv4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The vulnerability exists due to improper input validation when handling URLs within the IBE feature in the FortiMail management interface. A remote non-authenticated attacker can write arbitrary files on the underlying system via specially crafted HTTP requests, which may result in full system compromise. 

Note, the vulnerability is being actively exploited in the wild.


Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References