tlo.ac News

Hacking

FortiMail’s Encryption Feature Was Supposed to Protect Email. It Became the Attack Vector.

Forkast.news · 2026-10-02

A path traversal vulnerability in Fortinet FortiMail’s Identity-Based Encryption GUI component allows unauthenticated attackers to write arbitrary files on the underlying system through crafted HTTP or HTTPS requests. CVE-2026-104286, disclosed October 1 via …

Read at Forkast.news↗

Headline from NewsAPI.

More