Fortinet released security updates for FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator, but is withholding details until November 10, 2026.

The vulnerability or weakness

The vulnerabilities were discovered with AI assistance and validated by humans, but Fortinet warned that attackers also have access to AI tools.

Earlier attacks and coverage

No earlier related attack in our archive yet.

Business impact

Organizations may face increased risk of exploitation if they delay updates, as attackers can use the disclosed fixes to identify vulnerabilities.

Industries affected

The update affects a wide range of industries, as Fortinet devices are commonly used in various sectors.

Users affected

Customers using FortiMail 7.2 should upgrade to 7.4 or later, as the 7.2 branch is affected by the vulnerabilities.

Sources