Fortinet's coordinated security updates are out: FortiOS 8.0.2, 7.6.8, 7.4.13 and 7.2.14 and FortiManager and FortiAnalyzer 8.0.2, 7.6.8, 7.4.12 and 7.2.13 now have published release notes; Fortinet says the release has critical and high-severity fixes, including flaws found with the help of frontier AI models, and urges prompt upgrades; FortiMail and FortiAuthenticator updates were released on 21 October
Fortinet said in a 21 October 2026 blog post by Carl Windsor that on 22 October it would release a coordinated set of security updates for FortiOS, FortiManager and FortiAnalyzer, following recent releases from FortiMail and FortiAuthenticator, and that it strongly urges every customer to plan and promptly complete the upgrades as soon as they are available, prioritising internet-facing devices. Fortinet says the releases include critical and high-severity fixes, including fixes for vulnerabilities it identified with the help of frontier AI models that it has integrated into its product security process, and thanks Anthropic, OpenAI, Google and SpaceX for their collaboration. It recommends treating the release as a priority change rather than a routine maintenance cycle, saying AI tools can now help attackers reverse-engineer patches and build working exploits in hours or days, that published fixes reveal where changes were made, and that AI can chain lower-severity vulnerabilities into a more severe one. Until patching can be done, Fortinet recommends temporary mitigations: managing devices out of band, moving resources behind VPN or SASE where feasible, and applying virtual patches. Fortinet says the public advisories will be published on its PSIRT page at its next Patch Tuesday on 10 November, and that FortiSASE will be updated automatically before the 22 October release. The post lists no CVE numbers or CVSS scores. Primary: Fortinet blog (21 Oct). UPDATE (23 Oct 2026): Fortinet's document library now has release notes for FortiOS 8.0.2 (build 0251), 7.6.8 (build 3744), 7.4.13 (build 2933) and 7.2.14 (build 1778), and for FortiManager and FortiAnalyzer 8.0.2 (build 0198), 7.6.8 (build 3788), 7.4.12 (build 2836) and 7.2.13 (build 1750), matching the fixed versions in Fortinet's 21 October post. The release notes do not give a release date. Fortinet says the related advisories will be published on 10 November.
- Product
- Fortinet FortiOS, FortiManager, FortiAnalyzer, FortiMail and FortiAuthenticator
- Versions
- Per Fortinet (21 Oct): FortiOS 8.0.0–8.0.1 → 8.0.2, 7.6.0–7.6.7 → 7.6.8, 7.4.0–7.4.12 → 7.4.13, 7.2.0–7.2.13 → 7.2.14 (release notes published). FortiManager and FortiAnalyzer 8.0.0–8.0.1 → 8.0.2, 7.6.0–7.6.7 → 7.6.8, 7.4.0–7.4.11 → 7.4.12, 7.2.0–7.2.12 → 7.2.13 (release notes published). FortiMail 8.0.0–8.0.1 → 8.0.2, 7.6.0–7.6.6 → 7.6.7, 7.4.0–7.4.8 → 7.4.9, 7.2.0–7.2.9 → upgrade to 7.4 or later (available 21 Oct). FortiAuthenticator 8.0.0–8.0.3 → 8.0.4, 6.6.0–6.6.10 → 6.6.11 (available 21 Oct). Fixed versions 'or above'. As of 23 Oct.
- Exploited in Australia?
- unknown
- Patch to
- Fortinet: upgrade FortiOS to 8.0.2, 7.6.8, 7.4.13 or 7.2.14 and FortiManager/FortiAnalyzer to 8.0.2, 7.6.8, 7.4.12 or 7.2.13 (release notes now published); FortiMail to 8.0.2, 7.6.7 or 7.4.9 (7.2 users move to the 7.4 branch or later) and FortiAuthenticator to 8.0.4 or 6.6.11 now — internet-facing devices first. Until patched, manage devices out of band, move resources behind VPN or SASE where feasible and apply virtual patches. FortiSASE is updated automatically by Fortinet.
Primary: Fortinet blog (CISO Collective) — Fortinet Releases Security Hardening Release for Multiple Products (Carl Windsor, 21 Oct 2026) · Vendor: Fortinet — affected products and fixed versions table (21 Oct 2026) · Fortinet Document Library — FortiOS 7.6.8 release notes: Introduction and supported models (build 3744) · Fortinet Document Library — FortiOS 8.0.2 release notes: Introduction and supported models (build 0251) · Fortinet Document Library — FortiOS 7.4.13 release notes: Introduction and supported models (build 2933) · Fortinet Document Library — FortiOS 7.2.14 release notes: Introduction and supported models (build 1778) · Fortinet Document Library — FortiManager 7.6.8 Release (build 3788) · Fortinet Document Library — FortiAnalyzer 7.6.8 Release (build 3788) · Fortinet Document Library — FortiManager 8.0.2 Release (build 0198) · Fortinet Document Library — FortiAnalyzer 8.0.2 Release (build 0198) · Fortinet Document Library — FortiManager 7.4.12 Release (build 2836) · Fortinet Document Library — FortiAnalyzer 7.4.12 Release (build 2836) · Fortinet Document Library — FortiManager 7.2.13 Release (build 1750) · Fortinet Document Library — FortiAnalyzer 7.2.13 Release (build 1750)