Our takeFortinet advisory AV26-989 warns of an actively exploited vulnerability in FortiMail 7.2-8.0. Update to 8.0.2, 7.6.7 or 7.4.9 (or move 7.2 users to 7.4+).Cyber Resilience desk
Sources (1)
- cccs · cccs
What this means for you — Security leader:Fortinet released AV26-989 covering multiple critical vulnerabilities in FortiMail. Update to 8.0.2, 7.6.7, 7.4.9 or migrate 7.2 deployments to 7.4+; CISA/CCCS report active exploitation of CVE-2026-104286.
What this means for you — Lean IT orgs:If you run FortiMail, update it today to the fixed versions listed in Fortinet advisory AV26-989. Most small teams should also enable automatic updates and check that the appliance is not exposed directly to the internet.
What this means for you — MSP:Audit all client FortiMail instances for versions prior to 8.0.2, 7.6.7 or 7.4.9 and patch or migrate 7.2 branches immediately; active exploitation is confirmed by CCCS.
What this means for you — Researcher:Fortinet advisory AV26-989 discloses vulnerabilities in FortiMail 7.x–8.0 with confirmed exploitation of CVE-2026-104286 per CCCS. Patch guidance differs by branch; 7.2 requires upgrade to 7.4+.