Canadian Centre for Cyber Security cyber.gc.ca

Fortinet security advisory (AV26-989)

Imported from official source

October 02, 2026 11:37

Cybersecurity Classified by Officially

Serial number: AV26-989
Date: October 1, 2026

As of October 1, 2026, Fortinet is affected by vulnerabilities in the following products:

FortiMail 8.0
- Versions prior to 8.0.2
FortiMail 7.6
- Versions prior to 7.6.7
FortiMail 7.4
- Versions prior to 7.4.9
FortiMail 7.2
- Upgrade to branch 7.4 or above

Fortinet indicates that CVE-2026-104286 is exploited in the wild.

On October 1, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-104286 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

This is an extract. The publication continues at the source.

Read the original at the source: https://cyber.gc.ca/en/alerts-advisories/fortinet-security-advisory-av26-989

Officially imported this from Canadian Centre for Cyber Security’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization: Canadian Centre for Cyber Security — imported from official source
Official source: https://www.cyber.gc.ca/api/cccs/rss/v1/get?feed=alerts_advisories&lang=en ATOM
Imported: October 02, 2026 12:00
Versions: 1 recorded
Identity: https://cyber.gc.ca/en/alerts-advisories/fortinet-security-advisory-av26-989