{
  "id": "fortinet-security-hardening",
  "url": "https://ohshit.app/incidents/fortinet-security-hardening/",
  "title": "Fortinet urges priority upgrades across five product families before detailed advisories",
  "level": 3,
  "level_name": "sharted",
  "date": "2026-10-21",
  "date_is_approximate": false,
  "updated": null,
  "tags": [
    "Fortinet",
    "edge",
    "patching"
  ],
  "ecosystems": [
    "fortinet"
  ],
  "summary": "Fortinet announces critical and high-severity fixes, with detailed advisories planned for November 10. Prioritize internet-facing devices.",
  "splash": "FortiOS, FortiManager, FortiAnalyzer, FortiMail and FortiAuthenticator",
  "wipe": "Back up configurations; install the listed branch-specific updates when available",
  "in_the_wild": "unknown",
  "source_exception": null,
  "cves": [],
  "fixed": [
    {
      "product": "FortiOS 8.0",
      "version": "8.0.2"
    },
    {
      "product": "FortiOS 7.6",
      "version": "7.6.8"
    },
    {
      "product": "FortiOS 7.4",
      "version": "7.4.13"
    },
    {
      "product": "FortiOS 7.2",
      "version": "7.2.14"
    },
    {
      "product": "FortiManager 8.0",
      "version": "8.0.2"
    },
    {
      "product": "FortiManager 7.6",
      "version": "7.6.8"
    },
    {
      "product": "FortiManager 7.4",
      "version": "7.4.12"
    },
    {
      "product": "FortiManager 7.2",
      "version": "7.2.13"
    },
    {
      "product": "FortiAnalyzer 8.0",
      "version": "8.0.2"
    },
    {
      "product": "FortiAnalyzer 7.6",
      "version": "7.6.8"
    },
    {
      "product": "FortiAnalyzer 7.4",
      "version": "7.4.12"
    },
    {
      "product": "FortiAnalyzer 7.2",
      "version": "7.2.13"
    },
    {
      "product": "FortiMail 8.0",
      "version": "8.0.2"
    },
    {
      "product": "FortiMail 7.6",
      "version": "7.6.7"
    },
    {
      "product": "FortiMail 7.4",
      "version": "7.4.9"
    },
    {
      "product": "FortiMail 7.2",
      "version": "none",
      "status": "Migrate to 7.4 or later"
    },
    {
      "product": "FortiAuthenticator 8.0",
      "version": "8.0.4"
    },
    {
      "product": "FortiAuthenticator 6.6",
      "version": "6.6.11"
    }
  ],
  "checklist": [
    {
      "title": "Back up and upgrade",
      "hint": "Save the config first, internet-facing boxes go first. FortiMail 7.2 gets no fix; move to 7.4"
    },
    {
      "title": "Restrict administrative interfaces to trusted addresses",
      "hint": "HTTPS and SSH admin from trusted IPs only, or off on external interfaces. FortiManager should never face the internet"
    },
    {
      "title": "Review administrative access and configuration changes",
      "hint": "Enforce MFA on admin accounts; look for odd logins and changes nobody approved"
    }
  ],
  "sources": [
    {
      "name": "Fortinet CISO announcement",
      "url": "https://www.fortinet.com/blog/ciso-collective/fortinet-releases-security-hardening-release-for-multiple-products",
      "primary": true
    }
  ],
  "headline": null,
  "one_liner": null,
  "in_the_wild_note": "The announcement provides no exploitation evidence or individual CVE details",
  "mitigation": null,
  "timeline": [
    {
      "date": "Oct 21, 2026",
      "title": "Priority upgrade notice published"
    },
    {
      "date": "Oct 22, 2026 (scheduled)",
      "title": "Coordinated firmware rollout"
    }
  ],
  "body_markdown": "**L3:** widely deployed edge and identity products require priority updates. Availability varies by platform; verify downloads and upgrade paths. CVEs, technical impact and exploitation remain unspecified. Fortinet describes proactive AI-assisted discovery. Details are scheduled for November 10."
}