SecOraLens
CriticalMalwareCVE-2026-109618

Fortinet Urges Customers to Patch Critical Flaws Affecting FortiOS, FortiManager, and FortiAnalyzer

Cyber Security News·Source published ·1 min read

What happened?

Fortinet has urged customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026. The coordinated release addresses critical and high-severity vulnerabilities, including flaws found through AI-assisted security testing. The company said customers should address internet-facing devices first. In an October 21 announcement, Fortinet Chief Information Security Officer Carl Windsor warned customers against treating these fixes as routine maintenance.

Key details

  • Fortinet urges customers to prioritize security updates for FortiOS, FortiManager, and FortiAnalyzer scheduled for October 22, 2026.
  • The coordinated release addresses critical and high-severity vulnerabilities, including flaws found through AI-assisted security testing.
  • Fortinet CISO Carl Windsor warned customers against treating these fixes as routine maintenance.
  • Attackers can use AI to compare patched and older software, identify changed code, and build exploits within hours or days through patch diffing.
  • AI may help attackers combine lower-severity flaws into a more serious attack chain.
  • Fortinet plans to publish public advisories on its PSIRT page on November 10, after the October 22 update availability.
  • Fortinet recommends identifying exposed systems, backing up configurations, and scheduling urgent maintenance windows for October 22–23.

Affected

  • FortiOS versions 8.0.0–8.0.1, 7.6.0–7.6.7, 7.4.0–7.4.12, and 7.2.0–7.2.13 are affected.
  • FortiManager and FortiAnalyzer versions 8.0.0–8.0.1, 7.6.0–7.6.7, 7.4.0–7.4.11, and 7.2.0–7.2.12 are affected.

Fixes and mitigations

  1. FortiManager and FortiAnalyzer share minimum fixed releases: 8.0.2, 7.6.8, 7.4.12, and 7.2.13.
  2. FortiAuthenticator users should install 8.0.4 or 6.6.11 depending on their branch.
  3. Where upgrades cannot happen immediately, restrict HTTPS and SSH management to trusted addresses, remove FortiManager administration from the public internet, and enforce multifactor authentication with unique passwords.

What to look for

  • Review logs for unusual administrator access and unauthorized configuration changes before and after patching.

Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.

Back to all advisories