Fortinet schedules critical fixes for FortiOS, FortiManager, and FortiAnalyzer
Original title: Fortinet Releases Critical Security Updates for FortiOS, FortiManager, and FortiAnalyzer
Minimum fixed builds are set for October 22, while PSIRT advisories and CVE details are due November 10.
Fortinet announced coordinated hardening updates for FortiOS, FortiManager, and FortiAnalyzer on October 22, 2026, covering critical and high-severity vulnerabilities. CISO Carl Windsor said fixes come from frontier AI-assisted testing, with contributions acknowledged from Anthropic, OpenAI, Google, and SpaceX. FortiMail and FortiAuthenticator updates precede the rollout. The announcement lists minimum fixed versions by branch but does not name CVEs, scores, prerequisites, or confirmed attacks. Public PSIRT advisories are scheduled for November 10.
Unconfirmed: Fortinet has not published individual CVEs, CVSS scores, exploitation prerequisites, or whether any attacks are confirmed.
- FortiOS fixed versions are 8.0.2, 7.6.8, 7.4.13, and 7.2.14.
- FortiManager and FortiAnalyzer fixed builds are 8.0.2, 7.6.8, 7.4.12, and 7.2.13.
- FortiMail should reach 8.0.2, 7.6.7, or 7.4.9 or later; 7.2 must move to 7.4 or later.
- FortiAuthenticator fixes are in 8.0.4 and 6.6.11 or later.
- Fortinet asks customers to prioritize internet-facing systems on October 22–23.
Impact: Unspecified critical and high-severity flaws in Fortinet products
| Product | Affected | Fixed in |
|---|---|---|
| Fortinet FortiOS | Each listed branch from its initial release up to the version before the fixed release | 8.0.2, 7.6.8, 7.4.13, 7.2.14 |
| Fortinet FortiManager | Each listed branch from its initial release up to the version before the fixed release | 8.0.2, 7.6.8, 7.4.12, 7.2.13 |
| Fortinet FortiAnalyzer | Each listed branch from its initial release up to the version before the fixed release | 8.0.2, 7.6.8, 7.4.12, 7.2.13 |
| Fortinet FortiMail | Branch releases below the stated fixed versions; 7.2 must migrate | 8.0.2, 7.6.7, or 7.4.9 or later; 7.2 must move to 7.4 or later |
| Fortinet FortiAuthenticator | — | 8.0.4 and 6.6.11 or later |
- 1.Upgrade exposed systems to the listed fixed versions, prioritizing October 22–23.
- 2.Restrict HTTPS and SSH to trusted IPs and remove admin access from external interfaces.
- 3.Enforce MFA and watch for unusual administrative access or unauthorized configuration changes.
- Vendors
- Fortinet
From the original article
2 min read at gbhackers.com
Fortinet has announced coordinated security hardening updates for FortiOS, FortiManager, and FortiAnalyzer, scheduled for October 22, 2026. These updates aim to address critical and high-severity vulnerabilities. The company urges customers to prioritize updating internet-facing systems and treat these upgrades as urgent, not routine maintenance.
By Divya · gbhackers.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.