Daily brief · 2026-10-10
Fortinet FortiMail Under Active Attack + 3 More Fixes
Fortinet FortiMail
A path traversal vulnerability affecting Fortinet FortiMail is actively being exploited in the wild and has been added to the CISA Known Exploited Vulnerabilities catalog. This flaw allows an attacker to perform an arbitrary file write through crafted HTTP or HTTPS requests. Because active exploitation has been reported, immediate attention is required from customers.
Why it matters: This flaw allows an unauthenticated attacker to write arbitrary files directly to the underlying system.
What to do: Apply the Fortinet-provided workaround immediately and install the patched version.
CVEs: CVE-2026-104286
Citrix NetScaler ADC and NetScaler Gateway
A memory buffer vulnerability in Citrix NetScaler ADC and NetScaler Gateway has been added to the CISA Known Exploited Vulnerabilities catalog. This issue can cause a denial of service condition. The vendor, Cloud Software Group, strongly urges affected customers to address this immediately.
Why it matters: This vulnerability can lead to a denial of service.
What to do: Install the relevant updated versions as soon as possible.
CVEs: CVE-2026-88779
Cisco NX-OS
The NX-API feature in Cisco NX-OS contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges. Alternatively, this flaw could be used to cause a denial of service condition on an affected device.
Why it matters: An unauthenticated remote attacker can leverage this to execute arbitrary code with root privileges or cause a denial of service.
What to do: Review the Cisco security advisory for affected versions and apply the available patches.
CVEs: CVE-2026-76471
Also today
Microsoft Exchange Server
A security issue was added to the September 2026 Security Update V2 release for Microsoft Exchange Server.
What to do: Install the September 2026 Security Update V2.
CVEs: CVE-2026-96940
Sources
Tags: fortinet-fortimail, citrix-netscaler-adc-and-netscaler-gateway, cisco-nx-os, microsoft-exchange-server