EdgeProtect
Threat News
Latest cyber threat intelligence, breaches and exploitation
2 matching stories
Path TraversalFortinet FortiMail Zero-Day CVE-2026-104286 Under Active Exploitation
Fortinet disclosed a critical FortiMail zero-day, CVE-2026-104286, on 1 October 2026. It is exploited in the wild, rated CVSS 9.8 by Fortinet, and was added to CISA's KEV catalog the same day. It affects FortiMail 7.2.0 through 8.0.1; fixes are in 7.4.9, 7.6.7 and 8.0.2.
French Kubernetes Cluster's Webhook Scan Included n8n CVE-2026-21858 Probes
GreyNoise Labs reported in February 2026 that a Kubernetes scanning cluster on Bucklog SARL's network (AS211590) sent 33,270 sessions at webhook file-upload endpoints between 27 January and 3 February 2026. Forty of those sessions used an n8n-scanner/1.0 user agent aimed at n8n paths associated with CVE-2026-21858.
