CVEFinder.io

CVE-2026-104286

⛔ critical
Summary

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.

CVSS Score
9.8
Critical
EPSS Score
2.2
Exploit Probability
Published Date
2026-10-01
First Seen: 2026-10-04
📊 Relative Risk Intelligence

This CVE is Very High Risk - more severe than 90.6% of all 365,890 vulnerabilities in our database.

#34,455
Top 10% most severe
Severity Percentile
🎯 CISA SSVC Assessment Updated: Oct 2, 2026
🔍 Exploitation Status
Active
Exploits detected in the wild
⚙️ Automatable
YES
Can be exploited automatically
💥 Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-10-07
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE IDs (Weakness Types)
CWE-22

📦 Affected Products 3

Vendor Product Status Affected Versions
fortinet fortimail Affected
> 7.2.0 < 7.4.8
fortinet fortimail Affected
> 7.6.0 < 7.6.6
fortinet fortimail Affected
> 8.0.0 < 8.0.1

🔗 References 2

https://fortiguard.fortinet.com/psirt/FG-IR-26-175
Mitigation Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities...
US Government Resource

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2025-53681 ⚠️ high 7.2 0.4 An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerab... 2026-05-12
CVE-2025-55717 🔶 medium 4.0 0.0 A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7... 2026-03-10
CVE-2025-54972 🔶 medium 4.3 0.1 An improper neutralization of crlf sequences ('crlf injection') vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3,... 2025-11-18
CVE-2024-47569 🔶 medium 4.3 0.0 A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7... 2025-10-14
CVE-2024-40588 🔶 medium 4.4 0.0 Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiC... 2025-08-12
CVE-2025-32756 ⛔ critical 9.8 33.1 A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCa... 2025-05-13
These CVEs affect the same products