FortiNet – TheCyberThrone

FortiMail Zero-Day Exploited in the Wild — CVE-2026-104286

Executive Summary Fortinet has confirmed active exploitation of a critical FortiMail zero-day, CVE-2026-104286. The vulnerability carries a CVSS score of 9.8 and can allow an unauthenticated attacker to write arbitrary…

PravinKarthik October 2, 2026

CISA KEV

CISA KEV Update – 8 Vulnerabilities Added in Two Days

CISA’s Known Exploited Vulnerabilities (KEV) Catalog saw a significant two-day update on September 8 and September 9, 2026, with eight vulnerabilities added based on evidence of active exploitation. The interesting…

PravinKarthik September 10, 2026

CISA Expands KEV Catalog with FortiOS and Arista VeloCloud Flaws

The Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) Catalog by adding two vulnerabilities affecting Fortinet FortiOS and Arista VeloCloud Orchestrator. While the two flaws…

PravinKarthik July 29, 2026

FortiBleed: When Perimeter Trust Becomes the Attack Surface

A Comprehensive Breakdown of the Global Credential Exposure Crisis Perimeter security has long been treated as the hardened outer wall of enterprise defense. Firewalls, VPN concentrators, and edge gateways are…

PravinKarthik June 22, 2026

Fortinet Patch Tuesday – May 2026

Overview Fortinet published 11 advisories on Patch Tuesday describing as many bugs, including two dealing with critical-severity code execution security defects. While the company did not tag these two security…

PravinKarthik May 16, 2026

Fortinet FortiSandbox — Critical Vulnerability Advisory

Fortinet published a sweeping security advisory on April 14, 2026, disclosing multiple vulnerabilities across its FortiSandbox platform. Two of the flaws are rated Critical with unauthenticated attack vectors, demanding immediate…

PravinKarthik April 16, 2026

CISA Adds Seven Vulnerabilities to KEV Catalog — April 13, 2026

CISA has expanded the Known Exploited Vulnerabilities catalog with seven new entries on April 13, 2026, based on evidence of active exploitation. The batch spans three vendors — Microsoft, Adobe,…

PravinKarthik April 14, 2026

CVE-2026-35616 — Fortinet FortiClient EMS Critical Pre-Auth RCE

Executive Summary Fortinet FortiClient Endpoint Management Server (EMS) versions 7.4.5 and 7.4.6 contain a critical improper access control vulnerability (CWE-284) in the API authentication layer. Unauthenticated remote attackers can bypass…

PravinKarthik April 5, 2026