Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)

Fortinet warns attackers are actively exploiting a zero-day path-traversal flaw (CVE-2026-104286) in FortiMail, its email security gateway. The company urges customers to apply its published workaround until fixes are available.