Fortinet urges priority upgrades across five product families before detailed advisories
Fortinet announces critical and high-severity fixes, with detailed advisories planned for November 10. Prioritize internet-facing devices.
- Disclosed
- Oct 21, 2026
- Public disclosure date
- Severity
- Sharted
- No CVE: a breach, not a bug
- Splash zone
- FortiOS, FortiManager, FortiAnalyzer, FortiMail and FortiAuthenticator
- fortinet
- In the wild
- Unknown
- The announcement provides no exploitation evidence or individual CVE details
What happened
L3: widely deployed edge and identity products require priority updates. Availability varies by platform; verify downloads and upgrade paths. CVEs, technical impact and exploitation remain unspecified. Fortinet describes proactive AI-assisted discovery. Details are scheduled for November 10.
Fixed versions
| Product | Safe from | Note |
|---|---|---|
| FortiOS 8.0 | 8.0.2 | |
| FortiOS 7.6 | 7.6.8 | |
| FortiOS 7.4 | 7.4.13 | |
| FortiOS 7.2 | 7.2.14 | |
| FortiManager 8.0 | 8.0.2 | |
| FortiManager 7.6 | 7.6.8 | |
| FortiManager 7.4 | 7.4.12 | |
| FortiManager 7.2 | 7.2.13 | |
| FortiAnalyzer 8.0 | 8.0.2 | |
| FortiAnalyzer 7.6 | 7.6.8 | |
| FortiAnalyzer 7.4 | 7.4.12 | |
| FortiAnalyzer 7.2 | 7.2.13 | |
| FortiMail 8.0 | 8.0.2 | |
| FortiMail 7.6 | 7.6.7 | |
| FortiMail 7.4 | 7.4.9 | |
| FortiMail 7.2 | No fix | Migrate to 7.4 or later |
| FortiAuthenticator 8.0 | 8.0.4 | |
| FortiAuthenticator 6.6 | 6.6.11 |
Crime-scene timeline
Oct 21, 2026
Priority upgrade notice published
Oct 22, 2026 (scheduled)
Coordinated firmware rollout
Who said what
We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.
- Fortinet CISO announcementPrimary