🚨 ACTIVE EXPLOITATION
- Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes
CVE-2026-104286
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability, tracked as CVE-2026-104286 (CVSS score: 9.8),
📎 Coverage: thehackernews.com · 👁 via The Hacker News
🔓 CVEs & KEV
CVE-2026-19660 — DiviEngine Divi Membership — CVSS 9.8 — Divi Membership through 2.3.0 - Unauthenticated Authentication Bypass via 'paypal_...
CVE-2026-15896 — WebRehab Super Forms – Drag & Drop Form Builder — CVSS 9.1 — Super Forms through 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Rea...
CVE-2026-15897 — WebRehab Super Forms – Drag & Drop Form Builder — CVSS 8.8 — Super Forms – Drag & Drop Form Builder through 6.3.316 - Authenticated (Subscriber...
CVE-2026-92820 — SaturdayDrive Ninja Forms - File Uploads — CVSS 8.1 — Ninja Forms - File Uploads through 3.3.34 - Unauthenticated Arbitrary File UploadT...