Critical Vulnerability in Fortinet FortiMail Allows Remote Code Execution - Actively Exploited

A vulnerability has been discovered in Fortinet FortiMail that allows an attacker to execute arbitrary code remotely. Fortinet indicates that the vulnerability CVE-2026-104286 is being actively exploited. Indicators of compromise are available in the vendor's advisory. The security notice was issued on October 2, 2026.