Fortinet now lists fixed FortiMail builds for exploited CVE-2026-104286. Its log indicators show a rogue archive account sending data to attacker infrastructure, a change that survives the upgrade.
Fortinet has released fixed builds for CVE-2026-104286. Upgrade FortiMail now, then check archive accounts, cron activity and files for evidence of compromise.