Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.
Vendor: Fortinet
Product: FortiMail
Vendor advisory: FG-IR-26-175
EPSS: 0.046 (91.6th percentile, 2026-10-30)
Advisory → KEV: 0 days
FortiMail is affected by a path traversal vulnerability that lets an unauthenticated attacker write arbitrary files on the underlying system via crafted HTTP or HTTPS requests. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2026-10-01.
Reviewed by PerimeterClock.
| Date | Event | Source |
|---|---|---|
| 2026-10-01 | Vendor advisory published | Fortinet PSIRT |
| 2026-10-01 | Added to CISA KEV (confirmed exploitation) | CISA KEV |
| 2026-10-01 | First public PoC repo seen | GitHub |
Affected and fixed versions: see the vendor advisory or NVD entry below.