// tag
Security incidents tagged Fortinet. Newest first.
› Fortinet Multiple Products patched
FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands. Added to CISA KEV on 2026-10-16.
› Fortinet FortiMail
Fortinet FortiMail CVE-2026-104286 (CVSS 9.8) is an unauthenticated arbitrary file write via path traversal / null-byte issues in Identity-Based Encryption web flows. CISA confirmed active exploitation and ordered federal mitigation; Fortinet published FG-IR-26-175 with patches and interim mitigations (disable IBE / restrict admin/webmail).
› Fortinet Multiple Products patched
Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets. Added to CISA KEV on 2026-09-09.
› Fortinet FortiOS patched
Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level. Added to CISA KEV on 2026-07-27.
› Fortinet FortiSandbox patched
Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests. CISA added CVE-2026-25089, CVE-2026-39808 to the Known Exploited Vulnerabilities catalog on 2026-07-16 based on evidence of active exploitation.
› Fortinet FortiClient EMS patched
Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. Added to CISA KEV on 2026-04-13.
› Fortinet FortiClient EMS patched
In April 2026 Fortinet observed in-the-wild exploitation of CVE-2026-35616 in FortiClient EMS, a critical privilege-escalation / unauthenticated code-execution flaw (CVSS 9.1), and released an emergency weekend hotfix for EMS 7.4.5 and 7.4.6.
› Fortinet Multiple Products patched
Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices. Added to CISA KEV on 2026-01-27.
🚨 Fortinet FortiMail: CVE-2026-104286 (CVSS 9.8) is actively exploited. Unauthenticated attackers can write arbitrary files, potentially leading to code execution. Your email security gateway needs security. Ironic. #Cybersecurity t.co/ldmxkOOdHO t.co/0AYMecEQPs
fortinet is warning about a critical fortimail zero-day, cve-2026-104286, already under active exploitation. cisa has flagged it too. t.co/8phX4oRY7S it is an unauthenticated arbitrary file write, rated 9.8, triggered by a crafted http or https request.
🛡️ CVE-2026-104286: escritura arbitraria de archivos en Fortinet FortiMail CISA confirma explotación activa de CVE-2026-104286, una falla crítica de FortiMail que permite escritura arbitraria de archivos sin autenticación. t.co/V275SQHfFe #ciberplaneta #vulnerabilidades
