Information as of 26 October 2026. Fortinet announced a coordinated security-hardening release on 21 October and made updates for FortiOS, FortiManager and FortiAnalyzer available on 22 October 2026. It advised customers to prioritise devices exposed to the internet. Fortinet said public PSIRT advisories were scheduled for 10 November.
Affected products and fixed versions
This table summarises the product versions listed in Fortinet's announcement. FortiGate is the firewall appliance; FortiOS is its operating system. The announcement also covers FortiManager, FortiAnalyzer, FortiMail and FortiAuthenticator. Confirm model support, release branch and the official upgrade path before updating.
| Product and branch | Affected versions | Fixed version | Available |
|---|---|---|---|
| FortiOS 8.0 | 8.0.0–8.0.1 | 8.0.2 or above | 22 October 2026 |
| FortiOS 7.6 | 7.6.0–7.6.7 | 7.6.8 or above | 22 October 2026 |
| FortiOS 7.4 | 7.4.0–7.4.12 | 7.4.13 or above | 22 October 2026 |
| FortiOS 7.2 | 7.2.0–7.2.13 | 7.2.14 or above | 22 October 2026 |
| FortiManager 8.0 | 8.0.0–8.0.1 | 8.0.2 or above | 22 October 2026 |
| FortiManager 7.6 | 7.6.0–7.6.7 | 7.6.8 or above | 22 October 2026 |
| FortiManager 7.4 | 7.4.0–7.4.11 | 7.4.12 or above | 22 October 2026 |
| FortiManager 7.2 | 7.2.0–7.2.12 | 7.2.13 or above | 22 October 2026 |
| FortiAnalyzer 8.0 | 8.0.0–8.0.1 | 8.0.2 or above | 22 October 2026 |
| FortiAnalyzer 7.6 | 7.6.0–7.6.7 | 7.6.8 or above | 22 October 2026 |
| FortiAnalyzer 7.4 | 7.4.0–7.4.11 | 7.4.12 or above | 22 October 2026 |
| FortiAnalyzer 7.2 | 7.2.0–7.2.12 | 7.2.13 or above | 22 October 2026 |
| FortiMail 8.0 | 8.0.0–8.0.1 | 8.0.2 or above | 21 October 2026 |
| FortiMail 7.6 | 7.6.0–7.6.6 | 7.6.7 or above | 21 October 2026 |
| FortiMail 7.4 | 7.4.0–7.4.8 | 7.4.9 or above | 21 October 2026 |
| FortiMail 7.2 | 7.2.0–7.2.9 | Upgrade to 7.4 branch or later | 21 October 2026 |
| FortiAuthenticator 8.0 | 8.0.0–8.0.3 | 8.0.4 or above | 21 October 2026 |
| FortiAuthenticator 6.6 | 6.6.0–6.6.10 | 6.6.11 or above | 21 October 2026 |
Identify the devices that need review
Record each FortiGate model and FortiOS version, and check whether its management interface can be reached from the internet. Include FortiManager and FortiAnalyzer if your organisation uses them. Prioritise internet-facing devices and management interfaces.
Prepare before upgrading
Back up the device configuration, confirm the supported upgrade path, schedule a maintenance window and prepare a recovery plan. If the device supports branch offices, VPN or core network connections, assess the business impact and confirm who will be available during the change.
Check essential services after the upgrade
After updating, test VPN access, network connectivity and important firewall policies. Review administrator sign-in records and configuration changes as well. If a connection or policy behaves unexpectedly, follow the recovery procedure and contact the device supplier or IT support.
If an update cannot happen immediately
Limit management access to trusted networks or IP addresses, avoid exposing management services directly to the internet, and confirm that administrator accounts use strong unique passwords and multi-factor authentication. These steps can reduce risk but do not replace the update. Assign an owner and a target date for completing it.
A firewall is an important boundary for a business network. Regular checks of firmware, configuration backups and management access help prevent maintenance gaps. Connet One can help organise FortiGate maintenance and update planning.
Official sources
Information as of 26 October 2026. Fortinet said public security advisories were scheduled for 10 November 2026. Check the latest Fortinet notice and the update guidance for your device.