After CVE-2026-104286: A Compromise Assessment Plan for FortiMail Start from the exploitation window CVE-2026-104286 is a CVSS 9.8 path traversal in Fortinet FortiMail that allows unauthenticated file writes through crafted HTTP or HTTPS requests. Fortinet reports exploitation in the wild, and CISA added the issue to its Known Exploited Vulnerabilities catalog on October 1, 2026. If the management interface was internet-reachable, assume the window applies and investigate rat...