Recently, Fortinet has released security
updates to address critical vulnerabilities affecting Fortimail
(CVE-2026-104286).
2.0 Impact
Successful exploitation may allow an
unauthenticated remote attacker to write arbitrary files on the underlying
system by sending crafted HTTP or HTTPS requests. This may lead to execution of
arbitrary commands, installation of web shells, access to stored email and
credentials, and full compromise of the mail gateway.
3.0 Affected Products
- Fotinet FortiMail 8.0.0 through 8.0.1
- Fortinet FortiMail 7.6.0 through 7.6.6
- Fortinet FortiMail 7.4.0 through 7.4.8
- Fortinet FortiMail 7.2.0 through 7.2.9
4.0 Recommendations
CyberSecurity
Malaysia encourages users and administrators to review Fortinet's advisory and
apply the workarounds immediately. Fortinet's fixed releases (FortiMail 8.0.2,
7.6.7 and 7.4.9) were still listed as upcoming when the advisory was published,
so users should upgrade as soon as they become available. FortiMail 7.2 users
should upgrade to the 7.4 branch or later.
Until
patched, Fortinet advises disabling Identity-Based Encryption (IBE) support or
blocking access to the FortiMail management interface from the internet.
Administrators should also scan their FortiMail deployments for the indicators
of compromise (IOCs) published by Fortinet.
Kindly
refer to the following URL: https://fortiguard.fortinet.com/psirt/FG-IR-26-175
Generally, we advise users to be updated with
the latest security announcements by the vendor and follow best practice
security policies to determine which updates should be applied.
For further enquiries, please contact Cyber999
Incident Response Centre through the following channels:
E-mail: cyber999[at]cybersecurity.my
Phone: 1-300-88-2999 (monitored during business hours)
Mobile: +60 19 2665850 (24x7 call incident reporting)
Business Hours: Mon - Fri 08:30 -17:30 MYT
Web: https://www.cybersecurity.my
5.0 References