Threat+Constellation
Live— UTC
← Incidents
INCIDENT 760Exploited vulnerabilityLOW / UNDER REVIEWSourced

CVE-2026-104286 added to CISA KEV: Fortinet FortiMail Path Traversal Vulnerability

<p>CISA has added one new vulnerability to its <a href="https://edit.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation.</p> <ul type="disc"> <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-104286">CVE-2026-104286</a> Fortinet FortiMail Path Traversal Vulnerability</li> </ul> <p>This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise.&nbsp;</p> <p><a href="https://edit.cisa.gov/news-events/directives/bod-26-04-impleme…

Last evidence update
01 OCT 2026 · 12:00 UTC
Source count
2
Status
reported
GovernmentCVE-2026-104286
Observation history

How this record has evolved as evidence accumulated.

02 OCT · 05:22 UTC
Initial report
02 OCT · 05:22 UTC
Second independent source
02 OCT · 05:22 UTC
Summary updated from new evidence
Evidence