Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
Fortinet FortiMail Path Traversal Vulnerability
Lead record- Why these records are connected
- Records explicitly naming the same CVE identifier.
- Connection key
cve:CVE-2026-104286- Public snapshot refreshed
- today 17:32 UTC
- Distinct source events
- 3
- Source records represented
- 3
Current snapshot membership is shown here. Source histories and cited revisions remain on each record. Future source targets are labelled separately from observed changes. Browse connections.
Evidence in chronological order
- Thu 1 Oct · Dated source evidence · Fortinet · exploited, added to CISA KEV Fortinet FortiMail Path Traversal VulnerabilityCVE-2026-104286 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.CISA lists it as exploited
- Wed 28 Oct · Dated source evidence · Affected-version evidence changed An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 through 7.6.5, FortiMail 7.4.0 through 7.4.7, FortiMail 7.2.0 through 7.2.9, FortiMail 7.0 all vers…CVE-2026-104286 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
- Wed 28 Oct · Dated source evidence · Affected-version evidence changed An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9, FortiMai…CVE-2026-104286 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Affected-version evidence changed; observed by ChangeIntel, not the original publication date.