Every ZeroDayFeed story on Fortinet — across breaches, zero-days, ransomware, patches, policy, and industry, newest first.
Fortinet says CVE-2026-104286 has been exploited in the wild. The flaw is a CVSS 9.8 path traversal bug in FortiMail that lets unauthenticated attackers write arbitrary files. CISA's October 4 deadline for federal agencies has passed.
Read the story →A joint FBI and Secret Service advisory says the FortiBleed credential campaign against FortiGate firewalls and SSL VPNs is still active. Attackers are locking out real admins, and brokers are passing the access to INC/Lynx and Payload ransomware affiliates.
CISA added Fortinet's CVE-2025-61624 to its KEV catalog with an Oct 19 deadline and a forensic-triage requirement, as Palo Alto Networks links the flaw to a long-running telecom intrusion using a memory-resident FortiGate implant it calls PeerStitch.
BeyondTrust has patched CVE-2026-102764, a Remote Support authentication bypass that Mandiant says has been exploited since Aug. 29 by Armory Castle (formerly UNC5221). CISA's KEV deadline for federal agencies is Oct. 19.
Free daily briefing — breaches, actively exploited bugs, ransomware, and the patches to prioritize.
You're in. ✓
Check your inbox to confirm your subscription.No spam. Unsubscribe any time. Read our privacy policy.
