If your organisation runs FortiGate firewalls, FortiManager or FortiAnalyzer, plan to upgrade this week. On 21 October 2026 Fortinet announced a security hardening release covering five of its core products. Fortinet says the release contains critical and high-severity fixes.
The fixes come from Fortinet’s own AI-assisted security testing. Fortinet has not yet published CVE numbers or technical details. Those will appear in its public PSIRT advisories on 10 November 2026. Don’t wait for them. The risk started the moment the patches were released.
Which products are affected?
The patched versions of FortiOS, FortiManager and FortiAnalyzer are to be released on the 22 October. Patches for FortiMail and FortiAuthenticator were released on 21 October.
| Product | Branch | Affected versions | Upgrade to |
|---|---|---|---|
| FortiOS (FortiGate) | 8.0 | 8.0.0 – 8.0.1 | 8.0.2 or later |
| FortiOS (FortiGate) | 7.6 | 7.6.0 – 7.6.7 | 7.6.8 or later |
| FortiOS (FortiGate) | 7.4 | 7.4.0 – 7.4.12 | 7.4.13 or later |
| FortiOS (FortiGate) | 7.2 | 7.2.0 – 7.2.13 | 7.2.14 or later |
| FortiManager | 8.0 | 8.0.0 – 8.0.1 | 8.0.2 or later |
| FortiManager | 7.6 | 7.6.0 – 7.6.7 | 7.6.8 or later |
| FortiManager | 7.4 | 7.4.0 – 7.4.11 | 7.4.12 or later |
| FortiManager | 7.2 | 7.2.0 – 7.2.12 | 7.2.13 or later |
| FortiAnalyzer | 8.0 | 8.0.0 – 8.0.1 | 8.0.2 or later |
| FortiAnalyzer | 7.6 | 7.6.0 – 7.6.7 | 7.6.8 or later |
| FortiAnalyzer | 7.4 | 7.4.0 – 7.4.11 | 7.4.12 or later |
| FortiAnalyzer | 7.2 | 7.2.0 – 7.2.12 | 7.2.13 or later |
| FortiMail | 8.0 | 8.0.0 – 8.0.1 | 8.0.2 or later |
| FortiMail | 7.6 | 7.6.0 – 7.6.6 | 7.6.7 or later |
| FortiMail | 7.4 | 7.4.0 – 7.4.8 | 7.4.9 or later |
| FortiMail | 7.2 | 7.2.0 – 7.2.9 | Migrate to 7.4 or later |
| FortiAuthenticator | 8.0 | 8.0.0 – 8.0.3 | 8.0.4 or later |
| FortiAuthenticator | 6.6 | 6.6.0 – 6.6.10 | 6.6.11 or later |
FortiSASE updates automatically. FortiManager Cloud may need a manual update, and public cloud marketplace instances are being updated through Fortinet’s cloud partners. Source: Fortinet.
Why patch now, not on 10 November?
Once a patch is released, attackers can compare the old and new firmware to see exactly what was fixed. This is called patch diffing, and it can turn a patch into a working exploit within days. Fortinet itself warns that AI tools are making this faster.
So the exposure window opened on 21–22 October, when the patches came out, not on 10 November. The advisories will only make the details easier to find. Internet-facing firewalls and management platforms are the first systems attackers scan for, so patch them as soon as you can.
Fortinet has not said that any of these vulnerabilities are being exploited. The urgency comes from how quickly that can change once details are out.
What to do now
- Take an inventory. List every FortiGate, FortiManager, FortiAnalyzer, FortiMail and FortiAuthenticator device, with its current firmware version.
- Prioritise internet-facing devices. Patch perimeter firewalls and anything with an externally reachable management interface first.
- Back up configurations. Take a full config backup before every upgrade so you can roll back if needed.
- Check the upgrade path. Some versions need intermediate steps. Use Fortinet’s upgrade path tool rather than jumping straight to the target version.
- Schedule a maintenance window. Firewall upgrades mean a reboot. Plan downtime, or fail over if you run an HA pair.
- Review logs before and after. Look for unexpected admin logins, new admin accounts or configuration changes you didn’t make.
- Enforce MFA on admin accounts. Use strong, unique credentials for every administrator.
How Morgan Cyber Solutions can help
If your team is stretched or you’d rather not upgrade production firewalls yourself, we can do it for you. Our Fortinet patching service covers:
- Exposure check: we identify every affected device and version across your estate.
- Planned upgrades: we follow the correct upgrade path, out of hours if needed, with configuration backups taken first.
- Post-patch review: we check logs for signs of compromise and confirm every device is on a fixed version.
- Hardening: we lock down admin access and enforce MFA.
Book a free Fortinet exposure check at here and get patched now.
Sources
- Fortinet: Security Hardening Release for Multiple Products, 21 October 2026
