{"id":"CVE-2026-104286","published":"2026-10-01T20:17:24.010","lastModified":"2026-10-07T18:17:15.240","description":"An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-22"],"vendors":["fortinet"],"products":["fortimail"],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-175","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-104286","tags":["US Government Resource"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows an unauthenticated attacker to write arbitrary files on the system by exploiting path traversal in FortiMail versions 8.0.0 to 8.0.1, 7.6.0 to 7.6.6, 7.4.0 to 7.4.8, and 7.2.0 to 7.2.9, enabling unauthorized code execution.","exploitability":"Exploitation is relatively straightforward as it requires crafting HTTP or HTTPS requests to a specific endpoint, which may be accessible to external attackers.","blast_radius":"If exploited, this vulnerability could lead to unauthorized code execution, potentially allowing the attacker to gain full control over the system.","remediation":"Upgrade to FortiMail 8.0.2 or later, 7.6.7 or later, 7.4.9 or later, or 7.2.10 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["path-traversal","unauth-write","web","critical"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-02T08:41:38.822Z"}}