Security · Oct 13
FortiMail CVE-2026-104286 shows why KEV flaws jump the patch line
A CVSS 9.8 flaw in an email security gateway is the kind of CVE that should interrupt the calendar.
- Treat KEV listed gateway flaws as emergency work, even when exploit probability scores look low.
- Confirm FortiMail version exposure and apply available fixes or workarounds before the next routine patch cycle.
- Review gateway trust assumptions after arbitrary file write flaws, because security appliances are valuable footholds.