https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 05:11:09 +0000 https://vulnerability.circl.lu/sighting/f4548155-ceb9-4239-95f1-32f2f7daaa70/export {"uuid": "f4548155-ceb9-4239-95f1-32f2f7daaa70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwzmplydah2s", "content": "Daily IT Security Digest \u2014 2026-10-04\n# Daily IT Security Digest \u2014 2026-10-04\n\n## 1. Zero-Day in FortiMail Critically Exploited\nA critical zero-day vulnerability (CVE-2026-104286) in Fortinet FortiMail \u2014 an improper pathname restriction allowing unauthenticated arbitrary file write \u2014 is being", "creation_timestamp": "2026-10-04T05:02:13.672884Z"} {"uuid": "f4548155-ceb9-4239-95f1-32f2f7daaa70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwzmplydah2s", "content": "Daily IT Security Digest \u2014 2026-10-04\n# Daily IT Security Digest \u2014 2026-10-04\n\n## 1. Zero-Day in FortiMail Critically Exploited\nA critical zero-day vulnerability (CVE-2026-104286) in Fortinet FortiMail \u2014 an improper pathname restriction allowing unauthenticated arbitrary file write \u2014 is being", "creation_timestamp": "2026-10-04T05:02:13.672884Z"} https://vulnerability.circl.lu/sighting/f4548155-ceb9-4239-95f1-32f2f7daaa70/export Sun, 04 Oct 2026 05:02:13 +0000 https://vulnerability.circl.lu/sighting/50a80dfa-8c58-4dc8-91ed-2863951519f9/export {"uuid": "50a80dfa-8c58-4dc8-91ed-2863951519f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mwzkqmj6vz2f", "content": "Critical FortiMail zero-day exploited in the wild (CVE-2026-104286) #patchmanagement", "creation_timestamp": "2026-10-04T04:26:59.956005Z"} {"uuid": "50a80dfa-8c58-4dc8-91ed-2863951519f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mwzkqmj6vz2f", "content": "Critical FortiMail zero-day exploited in the wild (CVE-2026-104286) #patchmanagement", "creation_timestamp": "2026-10-04T04:26:59.956005Z"} https://vulnerability.circl.lu/sighting/50a80dfa-8c58-4dc8-91ed-2863951519f9/export Sun, 04 Oct 2026 04:26:59 +0000 https://vulnerability.circl.lu/sighting/b7ce7373-7140-4d8e-875c-46cd38860aba/export {"uuid": "b7ce7373-7140-4d8e-875c-46cd38860aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mwzjdxqi542r", "content": "BREAKING: CVE-2026-104286 \u2014 critical path traversal vulnerability allows arbitrary file writes on affected systems (Oct 2, SecurityWeek). 16-year-old KillSec ransomware leader arrested Oct 1 (HelpNetSecurity). CISA confirms 10 newly exploited MS/CISA KEVs including CVE-2026-71362 (Adobe Commerce) \u2014", "creation_timestamp": "2026-10-04T04:02:01.981492Z"} {"uuid": "b7ce7373-7140-4d8e-875c-46cd38860aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mwzjdxqi542r", "content": "BREAKING: CVE-2026-104286 \u2014 critical path traversal vulnerability allows arbitrary file writes on affected systems (Oct 2, SecurityWeek). 16-year-old KillSec ransomware leader arrested Oct 1 (HelpNetSecurity). CISA confirms 10 newly exploited MS/CISA KEVs including CVE-2026-71362 (Adobe Commerce) \u2014", "creation_timestamp": "2026-10-04T04:02:01.981492Z"} https://vulnerability.circl.lu/sighting/b7ce7373-7140-4d8e-875c-46cd38860aba/export Sun, 04 Oct 2026 04:02:01 +0000 https://vulnerability.circl.lu/sighting/219c3444-466f-48cd-82cd-c2b4b31c7489/export {"uuid": "219c3444-466f-48cd-82cd-c2b4b31c7489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mwyleroof325", "content": "Fortinet warns of critical zero-day (CVE-2026-104286) in FortiMail, actively exploited for RCE. CVSS 9.8. CISA added to KEV. Patches are pending, but urgent workarounds are available. #Fortinet #ZeroDay #CVE2026104286 #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-10-03T19:05:36.978664Z"} {"uuid": "219c3444-466f-48cd-82cd-c2b4b31c7489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mwyleroof325", "content": "Fortinet warns of critical zero-day (CVE-2026-104286) in FortiMail, actively exploited for RCE. CVSS 9.8. CISA added to KEV. Patches are pending, but urgent workarounds are available. #Fortinet #ZeroDay #CVE2026104286 #CyberSecurity\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-10-03T19:05:36.978664Z"} https://vulnerability.circl.lu/sighting/219c3444-466f-48cd-82cd-c2b4b31c7489/export Sat, 03 Oct 2026 19:05:36 +0000 https://vulnerability.circl.lu/sighting/a77d332d-f96d-4c03-b097-15c0ec9e5ebd/export {"uuid": "a77d332d-f96d-4c03-b097-15c0ec9e5ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104286", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117378535382286769", "content": "\ud83d\udcf0 Critical Fortinet FortiMail Zero-Day Exploited for RCE\nFortinet warns of critical zero-day (CVE-2026-104286) in FortiMail, actively exploited for RCE. CVSS 9.8. CISA added to KEV. Patches are pending, but urgent workarounds are available. #Fortinet #ZeroDay #CVE2026104286 #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-fortinet-fortimail-zero-day-exploited-cve-2026-104286/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-10-03T19:05:13.635333Z"} {"uuid": "a77d332d-f96d-4c03-b097-15c0ec9e5ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-104286", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117378535382286769", "content": "\ud83d\udcf0 Critical Fortinet FortiMail Zero-Day Exploited for RCE\nFortinet warns of critical zero-day (CVE-2026-104286) in FortiMail, actively exploited for RCE. CVSS 9.8. CISA added to KEV. Patches are pending, but urgent workarounds are available. #Fortinet #ZeroDay #CVE2026104286 #CyberSecurity\n\ud83d\udd17 https://cyber.netsecops.io/articles/critical-fortinet-fortimail-zero-day-exploited-cve-2026-104286/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-10-03T19:05:13.635333Z"} https://vulnerability.circl.lu/sighting/a77d332d-f96d-4c03-b097-15c0ec9e5ebd/export Sat, 03 Oct 2026 19:05:13 +0000 https://vulnerability.circl.lu/sighting/a5300515-a2aa-4a92-a30b-bada9d88841c/export {"uuid": "a5300515-a2aa-4a92-a30b-bada9d88841c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mwyk2de2x72r", "content": "FortiMail zero-day exploited in the wild \u26a0\ufe0f\n\nFortinet warns of a critical, actively exploited FortiMail zero-day (CVE-2026-104286) allowing unauthenticated file writes.\n\nWith fixes \"upcoming\" for some versions, admins are managing a zero-day while waiting for the official patch.", "creation_timestamp": "2026-10-03T18:41:53.171059Z"} {"uuid": "a5300515-a2aa-4a92-a30b-bada9d88841c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/five-oclick-tech.bsky.social/post/3mwyk2de2x72r", "content": "FortiMail zero-day exploited in the wild \u26a0\ufe0f\n\nFortinet warns of a critical, actively exploited FortiMail zero-day (CVE-2026-104286) allowing unauthenticated file writes.\n\nWith fixes \"upcoming\" for some versions, admins are managing a zero-day while waiting for the official patch.", "creation_timestamp": "2026-10-03T18:41:53.171059Z"} https://vulnerability.circl.lu/sighting/a5300515-a2aa-4a92-a30b-bada9d88841c/export Sat, 03 Oct 2026 18:41:53 +0000 https://vulnerability.circl.lu/sighting/5f72a2f4-a00f-4fd9-be1d-1e64582b2f7b/export {"uuid": "5f72a2f4-a00f-4fd9-be1d-1e64582b2f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mwxspjvjk32i", "content": "FortiMail Bleeds Out; Bureaucracy Still Waiting for the Translation\nPANIC 78% | Lag 0.0h | FortiMail CVE-2026-104286 allows unauthenticated attackers to write files, so exposed systems need m\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-10-03T11:44:14.378880Z"} {"uuid": "5f72a2f4-a00f-4fd9-be1d-1e64582b2f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mwxspjvjk32i", "content": "FortiMail Bleeds Out; Bureaucracy Still Waiting for the Translation\nPANIC 78% | Lag 0.0h | FortiMail CVE-2026-104286 allows unauthenticated attackers to write files, so exposed systems need m\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-10-03T11:44:14.378880Z"} https://vulnerability.circl.lu/sighting/5f72a2f4-a00f-4fd9-be1d-1e64582b2f7b/export Sat, 03 Oct 2026 11:44:14 +0000 https://vulnerability.circl.lu/sighting/1a2f1b05-0d3a-4cee-b73a-0e8d89bd84a4/export {"uuid": "1a2f1b05-0d3a-4cee-b73a-0e8d89bd84a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/cyberupdates365.bsky.social/post/3mwxskrg2uk2f", "content": "Fortinet says Critical FortiMail zero-day CVE-2026-104286 is actively exploited.\n\nThe unauthenticated flaw can allow arbitrary file writes through crafted HTTP/HTTPS requests.\n\ncyberupdates365.com/fortimail-ze...\n\n#Cybersecurity #Fortinet #ZeroDay", "creation_timestamp": "2026-10-03T11:41:38.024172Z"} {"uuid": "1a2f1b05-0d3a-4cee-b73a-0e8d89bd84a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/cyberupdates365.bsky.social/post/3mwxskrg2uk2f", "content": "Fortinet says Critical FortiMail zero-day CVE-2026-104286 is actively exploited.\n\nThe unauthenticated flaw can allow arbitrary file writes through crafted HTTP/HTTPS requests.\n\ncyberupdates365.com/fortimail-ze...\n\n#Cybersecurity #Fortinet #ZeroDay", "creation_timestamp": "2026-10-03T11:41:38.024172Z"} https://vulnerability.circl.lu/sighting/1a2f1b05-0d3a-4cee-b73a-0e8d89bd84a4/export Sat, 03 Oct 2026 11:41:38 +0000 https://vulnerability.circl.lu/sighting/c219bd82-ce22-4b84-a4a7-7e9c466e9a54/export {"uuid": "c219bd82-ce22-4b84-a4a7-7e9c466e9a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwxs4zurys24", "content": "Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)\n\nFortinet is warning customers that attackers are exploiting a zero-day vulnerability (CVE-2026-104286) in FortiMail, its email security gateway. Fortinet says the flaw has been reported to be exploited in the wil\u2026\n#hackernews #news", "creation_timestamp": "2026-10-03T11:33:53.663082Z"} {"uuid": "c219bd82-ce22-4b84-a4a7-7e9c466e9a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mwxs4zurys24", "content": "Critical FortiMail zero-day exploited in the wild (CVE-2026-104286)\n\nFortinet is warning customers that attackers are exploiting a zero-day vulnerability (CVE-2026-104286) in FortiMail, its email security gateway. Fortinet says the flaw has been reported to be exploited in the wil\u2026\n#hackernews #news", "creation_timestamp": "2026-10-03T11:33:53.663082Z"} https://vulnerability.circl.lu/sighting/c219bd82-ce22-4b84-a4a7-7e9c466e9a54/export Sat, 03 Oct 2026 11:33:53 +0000 https://vulnerability.circl.lu/sighting/5c96943c-99b0-4e5a-8ed9-9ee02fbef0ec/export {"uuid": "5c96943c-99b0-4e5a-8ed9-9ee02fbef0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mwxczm5dht2w", "content": "Why do we even bother buying security appliances when Fortinet FortiMail administrators are greeted by yet another exploited zero-day flaw? This critical path traversal nightmare, cheerfully tagged CVE-2026-104286, lets opportunistic attackers write arbitrary files wherever they ...\n\nRead full story", "creation_timestamp": "2026-10-03T07:03:32.370217Z"} {"uuid": "5c96943c-99b0-4e5a-8ed9-9ee02fbef0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-104286", "type": "seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mwxczm5dht2w", "content": "Why do we even bother buying security appliances when Fortinet FortiMail administrators are greeted by yet another exploited zero-day flaw? This critical path traversal nightmare, cheerfully tagged CVE-2026-104286, lets opportunistic attackers write arbitrary files wherever they ...\n\nRead full story", "creation_timestamp": "2026-10-03T07:03:32.370217Z"} https://vulnerability.circl.lu/sighting/5c96943c-99b0-4e5a-8ed9-9ee02fbef0ec/export Sat, 03 Oct 2026 07:03:32 +0000