FortiMail’s Encryption Feature Was Supposed to Protect Email. It Became the Attack Vector.

A path traversal vulnerability in Fortinet FortiMail’s Identity-Based Encryption GUI component allows unauthenticated attackers to write arbitrary files on the underlying system through crafted HTTP or HTTPS requests. CVE-2026-104286,…