Fortinet Releases Security Hardening Release for Multiple Products
Fortinet releases security updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator
Summary
Fortinet releases security updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator
Affected platforms
The following platforms are known to be affected:
Threat details
Introduction
Fortinet has released security hardening updates in several product lines, addressing vulnerabilities discovered through their AI-assisted security testing program.
Fortinet has confirmed that these updates address multiple critical and high-severity vulnerabilities and assesses that AI tools are enabling threat actors to reverse-engineer security patches and develop functional exploits shortly after vulnerabilities are publicly disclosed. To reduce the risk of rapid exploitation, Fortinet has released security updates in advance of publishing detailed vulnerability information providing organisations time to apply mitigations and patches before technical details become widely available.
Fortinet advise vulnerability details will be published on 10 November 2026.
Vulnerability Details Disclosed
Fortinet has now disclosed technical details of the vulnerabilities addressed by these security hardening updates. The disclosure includes multiple critical vulnerabilities, several of which could allow unauthenticated attackers to bypass authentication or execute unauthorised code or commands under specific configurations.
Organisations are encouraged to review the published Fortinet PSIRT advisories and ensure the relevant updates and mitigations have been applied.
The NHS England National CSOC assesses further exploitation as likely and have published CC-4888 in response to this disclosure.
Threat updates
| Date | Update |
|---|---|
| 11 Nov 2026 | Added Vulnerability Details Disclosed box |
Remediation advice
Affected organisations are urged to review Fortinets "Fortinet Releases Security Hardening Release for Multiple Products" blog post, assess exposure, and prioritise applying relevant updates.
Definitive source of threat updates
Last edited: 11 November 2026 2:37 pm