Vulnerabilities in Fortinet Products

While proactively testing the security of its products, Fortinet discovered several critical and high-severity vulnerabilities, for which security updates will be released. Fortinet reported multiple critical and high-severity vulnerabilities in FortiOS, FortiManager, and FortiAnalyzer. The vulnerabilities were identified using artificial intelligence solutions in software security testing. The security updates are scheduled for today (October 22, 2026); therefore, the manufacturer urges users to install them immediately after publication, prioritizing internet-facing devices. If the security updates cannot be installed immediately, it is recommended to restrict remote access to device management interfaces via HTTPS and SSH, allowing access only from trusted IP addresses, and to enable multifactor authentication for administrator accounts. More information: https://www.fortinet.com/blog/ciso-collective/fortinet-releases-security-hardening-release-for-multiple-products