Active exploitation, a passed federal remediation deadline and unavailable fixed builds make FortiMail a forensic investigation, not simply a Monday patch task.
What changed
Fortinet disclosed active exploitation of CVE-2026-104286 in FortiMail and published file, hash, IP-address and log indicators. CISA placed the flaw in its Known Exploited Vulnerabilities catalogue with an October 4 federal deadline and a forensic-triage requirement.
Public record through 2026-10-05. Source references count citations across published briefings, including repeated sources. Explore the record and its limits →
What We Publish / What We Sell
D
Free · Public
The Daily
Five evidence-backed selections for security leaders, every weekday.
Security.io scores each dimension from 0 to 100 using confirmed exploitation, privileged placement, affected operating models, response windows, resilience impact and evidence quality. Scores are editorial comparisons, not probabilities or external measurements. Exposure: 88. Urgency: 96. Business consequence: 91. Focus the chart and use the up and down arrow keys for detail. Source: Security.io editorial scoring from the five validated story source sets; scores are non-statistical assessments.