Fortinet warns of critical FortiMail flaw exploited in zero-day attacks

Fortinet has issued an advisory regarding a critical vulnerability affecting FortiMail, tracked as CVE-2026-104286. The flaw is actively exploited in the wild as a zero-day to execute unauthorized commands on vulnerable appliances. Security administrators are strongly advised to apply available patches immediately to mitigate potential exploitation of their email infrastructure.