Fortinet warns of critical FortiMail zero-day exploited in active attacks

Fortinet disclosed a critical FortiMail vulnerability (CVE-2026-104286) being actively exploited in zero-day attacks, allowing unauthorized code execution. The flaw affects email security gateways, a high-value target for network compromise. Immediate patching is advised, but exploitation details and scope remain partially undisclosed.