Critical FortiMail zero-day actively exploited and added to the KEV catalog

Fortinet has confirmed the active exploitation of CVE-2026-104286, a critical zero-day vulnerability in FortiMail email security gateways. The flaw, rated with a CVSS score of 9.8,