FortiMail zero-day exploited in attacks

A critical zero-day vulnerability in FortiMail is being exploited in attacks. It allows unauthenticated arbitrary file writes.

Published 2026-10-04 11:08:21.174038+00:00 · First seen 2026-10-04 08:01:51.339284+00:00

Corroborating sources

• BleepingComputer · 2026-10-01T22:42:49+00:00 · Independent report
  Shared subjects: fortimail, fortinet · Event: exploitation
• The Hacker News · 2026-10-02T05:49:50+00:00 · Independent report
  Shared subjects: fortimail, fortinet · Event: exploitation

Independent publishers report the same event within 72 hours. Methodology