Threat Analysis: Critical Flaws in FortiMail and Dell CSM
This is your Daily Threat Analysis for 2nd October 2026.
FortiMail’s zero-day vulnerability, tracked as CVE-2026-104286, has caused quite the stir. Actively exploited with no authentication needed, this path traversal vulnerability lets attackers execute arbitrary code on the affected systems. If you’re running FortiMail 7.2 through 8.0, it’s time to check those patches, or lack thereof. The advisory doesn’t say this, but the lack of a patch is leaving many scrambling.
Meanwhile, Dell Enterprise’s Container Storage Modules (CSM) have unveiled a different sort of trouble. Two maximum severity vulnerabilities allow attackers to potentially gain admin privileges on Kubernetes environments. If you’re relying on Dell for your data storage, overlook these flaws at your peril.
Microsoft’s official X account hijack is another curious affair. Used in a crypto pump-and-dump scheme, it shows the ever-present risk of credential theft and misuse, especially with high-profile accounts.
What’s Left Unsaid:
Both the FortiMail and CSM vulnerabilities highlight a persistent issue: organisations, especially in fast-paced environments, lagging behind in deploying timely patches. The NCSC highlighted this gap in 2025, yet it remains. The same organisations often claim they’re too small a target, forgetting that vulnerabilities like these don’t discriminate by size.
Actionable Steps:
- Immediate Patching: FortiMail users must check for available updates and apply them ASAP. Dell CSM users, ensure systems are updated and review access controls in Kubernetes.
- Monitor Credentials: With the Microsoft incident, ensure robust monitoring of account activity and consider implementing two-factor authentication as standard.
- Review Patch Policies: Your patch management policies need to be proactive, not reactive. If your MSP tells you you’re not a target, ask them about contingency strategies when you are.
Before the next item: if Threat Analysis is useful to you, follow the show wherever you listen so tomorrow’s briefing lands automatically, and pass it to someone who needs the heads-up.