https://vulnerability.circl.lu/sightings/feed 2026-10-03T05:59:45.446857+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/bc0f798d-4d76-4604-8a79-fa571837ae8d/export 2026-10-03T05:59:45.469947+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bc0f798d-4d76-4604-8a79-fa571837ae8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/bot-de-florian.bsky.social/post/3mwx7amhvqu2r", "content": "\ud83d\udee1\ufe0f Revue cyber du 03/10 :\n\n\u2022 FortiMail : 0-day critique (CVE-2026-104286) exploit\u00e9, au KEV CISA \u2014 acc\u00e8s complet \u00e0 la messagerie.\nhttps://www.lemagit.fr/actualites/366651574/Utilisateurs-de-FortiMail-patchez", "creation_timestamp": "2026-10-03T05:56:22.670538Z"} 2026-10-03T05:56:22.670538+00:00 https://vulnerability.circl.lu/sighting/3d359c79-7509-4ce1-a616-494a66a7481f/export 2026-10-03T05:59:45.471295+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3d359c79-7509-4ce1-a616-494a66a7481f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwx4bvg6nq2e", "content": "Daily IT Security Digest \u2014 2026-10-03\nresults\n\n## 6. FortiMail Zero-Day (CVE-2026-104286) and Active Exploitation\nFortinet disclosed a CRITICAL vulnerability (CVE-2026-104286) involving improper pathname restriction that allows unauthenticated attackers to write arbitrary files on FortiMail", "creation_timestamp": "2026-10-03T05:02:54.515835Z"} 2026-10-03T05:02:54.515835+00:00 https://vulnerability.circl.lu/sighting/140b3bfb-0b06-41c1-ba84-39eb600ba183/export 2026-10-03T05:59:45.471452+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "140b3bfb-0b06-41c1-ba84-39eb600ba183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/lemagit.bsky.social/post/3mwwxoyzsnl2w", "content": "\u26a0\ufe0f FortiMail : Vuln\u00e9rabilit\u00e9 critique (CVE-2026-104286). Risque d'acc\u00e8s complet \u00e0 votre messagerie. \ud83d\udce7 Comment s\u00e9curisez-vous vos interfaces d'administration ? D\u00e9couvrez notre analyse strat\u00e9gique. \ud83d\udc47 [lire]", "creation_timestamp": "2026-10-03T03:40:45.987726Z"} 2026-10-03T03:40:45.987726+00:00 https://vulnerability.circl.lu/sighting/39aba7e7-8ab9-4aa2-b145-f59d8e3efc3e/export 2026-10-03T05:59:45.471578+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "39aba7e7-8ab9-4aa2-b145-f59d8e3efc3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwwshk5zqv26", "content": "\ud83d\udccc CVE-2026-104286 - An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7... https://www.cyberhub.blog/cves/CVE-2026-104286", "creation_timestamp": "2026-10-03T02:07:06.623916Z"} 2026-10-03T02:07:06.623916+00:00 https://vulnerability.circl.lu/sighting/4c0d955a-2f00-41de-a299-bccb0c2e94d5/export 2026-10-03T05:59:45.471685+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4c0d955a-2f00-41de-a299-bccb0c2e94d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwwpknjt4s24", "content": "Fortinet warns of critical FortiMail flaw exploited in zero-day attacks\n\nFortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable dev\u2026\n#hackernews #news", "creation_timestamp": "2026-10-03T01:15:09.557399Z"} 2026-10-03T01:15:09.557399+00:00 https://vulnerability.circl.lu/sighting/8bc7d34e-78d8-4524-8c16-0424328614c3/export 2026-10-03T05:59:45.471798+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8bc7d34e-78d8-4524-8c16-0424328614c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/cybernewsdaily.bsky.social/post/3mwwjgqk55t24", "content": "Fortinet FortiMail flaw CVE-2026-104286 actively exploited, allowing arbitrary file writes\n\nSponsor this channel today. https://www.ProNetGrowth.com/?utm_source=bluesky&utm_medium=post&utm_campaign=news-cybersecurity&utm_content=cybersecurity\n\n#cybersecurity #hacking", "creation_timestamp": "2026-10-02T23:25:36.890113Z"} 2026-10-02T23:25:36.890113+00:00 https://vulnerability.circl.lu/sighting/8e18411b-d03b-4ab5-b772-a59a1ba3bbc3/export 2026-10-03T05:59:45.471907+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8e18411b-d03b-4ab5-b772-a59a1ba3bbc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "published-proof-of-concept", "source": "https://t.me/VulnerabilityNews/44735", "content": "Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action\n\nCVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.\nThe post Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action appeared first on SecurityWeek.\nhttps://www.securityweek.com/exploited-fortinet-fortimail-zero-day-calls-for-urgent-action/", "creation_timestamp": "2026-10-02T23:00:48.000000Z"} 2026-10-02T23:00:48+00:00 https://vulnerability.circl.lu/sighting/541cb9d0-d6eb-471e-a3a1-bbd22e96001b/export 2026-10-03T05:59:45.472024+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "541cb9d0-d6eb-471e-a3a1-bbd22e96001b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://t.me/VulnerabilityNews/44735", "content": "Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action\n\nCVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.\nThe post Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action appeared first on SecurityWeek.\nhttps://www.securityweek.com/exploited-fortinet-fortimail-zero-day-calls-for-urgent-action/", "creation_timestamp": "2026-10-02T23:00:48.000000Z"} 2026-10-02T23:00:48+00:00 https://vulnerability.circl.lu/sighting/04c39ef6-cf31-449e-b1b7-3265ec54a4d2/export 2026-10-03T05:59:45.472130+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "04c39ef6-cf31-449e-b1b7-3265ec54a4d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mwwdlxb2nh2m", "content": "\ud83d\udea8 Fortinet reports CVE-2026-104286 is being exploited in the wild.\n\nCensys observes ~2,800 Internet-exposed FortiMail hosts, excluding honeypots. No fixed builds are available yet.\n\nCensys ARC advisory: https://bit.ly/4htjUkY ", "creation_timestamp": "2026-10-02T21:41:34.005498Z"} 2026-10-02T21:41:34.005498+00:00 https://vulnerability.circl.lu/sighting/22c9c396-23d2-4edd-8f4b-fb264ed6760d/export 2026-10-03T05:59:45.472240+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "22c9c396-23d2-4edd-8f4b-fb264ed6760d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a66b618f-aae5-401b-b529-f7b0c130cdcb", "content": "", "creation_timestamp": "2026-10-02T20:00:45.002905Z"} 2026-10-02T20:00:45.002905+00:00