FortiMail’s Mail Slot Zero-Day

FortiMail CVE-2026-104286 is being actively exploited to write arbitrary files without authentication. Disable IBE or restrict the webmail interface, check Fortinet’s indicators for compromise, and install fixed releases when available.