Today, on 22nd of October 2026, Fortinet will release critical out-of-band security updates for FortiMail and FortiAuthenticator, with coordinated updates for FortiOS, FortiManager, and FortiAnalyzer.
More detailed information has been published under https://www.fortinet.com/blog/ciso-collective/fortinet-releases-security-hardening-release-for-multiple-products
Please note, that the upgrades have not been released yet! (13:30 CET)
Identified via Fortinet’s AI-assisted testing program, these vulnerabilities demand immediate attention. Because adversaries now use AI to reverse-engineer patches and chain minor flaws into critical exploits within hours, unpatched edge devices are at extreme risk.
What you need to know:
- Scope: All supported major releases (8.0, 7.6, 7.4, 7.2) of FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator.
- Impact: Potentially a full system compromise. (No details published yet)
- Action Required: Execute emergency patching procedures immediately. Do not wait for regular maintenance windows.
- Mitigations: If immediate patching is impossible, isolate management interfaces out-of-band, move resources behind VPN/SASE, or apply virtual patches.
Boll Resellers are free to contact our support team directly for technical assistance or if anomalous activity is suspected – We are here to assist you in securing your infrastructure. Other customers please get in contact with the Fortinet Support.
