Fortinet Urges Fast Upgrades as AI-Found Flaws Hit FortiOS, FortiManager and FortiAnalyzer
Do Son 
TL;DR
Fortinet is shipping Fortinet security updates for FortiOS, FortiManager and FortiAnalyzer on October 22, 2026. FortiMail and FortiAuthenticator fixes arrived a day earlier. The fixes cover critical and high-severity flaws found through AI-assisted testing. CVE details will follow on November 10, so admins should patch now.
Why It Matters
FortiOS runs FortiGate firewalls and VPN gateways at the edge of many networks. Attackers have targeted these devices often in recent years. As a result, Fortinet asks customers to treat this release “as a priority change rather than a routine maintenance cycle.”
AI found the bugs, and attackers have AI too
Fortinet now uses frontier AI models in product testing. They analyze “code paths, protocol handling, and configuration logic.” The company thanked Anthropic, OpenAI, Google and SpaceX for their help.
However, Fortinet admits the same tools cut both ways. In a Fortinet blog post on the security hardening release, CISO Carl Windsor warns that “the window between disclosure and exploitation continues to shrink.”
How the Attack Risk Works
Fortinet has not described the individual flaws. Instead, it explains why attackers may move fast once these Fortinet security updates go public:
- Faster weaponization: AI tools can help adversaries “build working exploits in hours or days, rather than weeks.”
- Patch diffing: the fixes themselves reveal where code changed.
- Chaining: AI can link lower-severity bugs into one serious attack.
Exploitation status
Fortinet does not report exploitation of these flaws in the wild. No CVE IDs or public proof-of-concept exploits exist yet.
Affected Versions
- FortiOS: fixed in 8.0.2, 7.6.8, 7.4.13 and 7.2.14
- FortiManager and FortiAnalyzer: fixed in 8.0.2, 7.6.8, 7.4.12 and 7.2.13
- FortiMail: fixed in 8.0.2, 7.6.7 and 7.4.9; 7.2 users must move to 7.4 or later
- FortiAuthenticator: fixed in 8.0.4 and 6.6.11
FortiSASE updates automatically. FortiManager Cloud may need a manual update, and public cloud images arrive through cloud partners.
Patch and Mitigation Steps
- Inventory every FortiOS and FortiManager device, starting with internet-facing ones.
- Book maintenance windows for October 22-23 and back up configurations.
- Restrict HTTPS and SSH admin access to trusted IP addresses.
- Keep FortiManager administration off the internet and enforce MFA.
- Watch logs for unusual admin logins or configuration changes.
Fortinet stresses that these steps “reduce risk but do not replace the need for a timely upgrade.” Apply these Fortinet security updates first on exposed FortiOS devices.
Support Our Threat Intelligence
Find our vulnerability reports and weekly recaps helpful? Support our work today and unlock a 100% ad-free reading experience!
Buy Me a Coffee
