Catch up on the essentials
- Fortinet released coordinated security updates on October 22 for FortiOS, FortiManager and FortiAnalyzer, according to IT Security News.
- The reported FortiOS update provides fixed versions for affected releases in the 8.0, 7.6, 7.4 and 7.2 branches.
- The company recommended completing upgrades promptly when the releases were available and, where patching could not be completed immediately, limiting exposure by managing devices out of band, moving resources behind VPN or SASE where feasible, and applying virtual patches.
Selected from this article · 2026-10-22
Read on for the full pictureFortinet coordinates updates across three security products
Fortinet released coordinated security updates on October 22 for FortiOS, FortiManager and FortiAnalyzer, according to IT Security News. Fortinet’s prior announcement said the updates were scheduled for that date and included critical and high-severity fixes.
FortiOS fixes cover four affected branches
The reported FortiOS update provides fixed versions for affected releases in the 8.0, 7.6, 7.4 and 7.2 branches. The listed fixed versions are 8.0.2 or above, 7.6.8 or above, 7.4.13 or above and 7.2.14 or above, respectively.
Fortinet’s earlier product table identified affected FortiOS ranges as 8.0.0–8.0.1, 7.6.0–7.6.7, 7.4.0–7.4.12 and 7.2.0–7.2.13. It said customers should prioritize upgrades for internet-facing devices.
FortiManager and FortiAnalyzer receive parallel fixes
FortiManager updates cover the 8.0, 7.6, 7.4 and 7.2 branches, with fixed versions listed as 8.0.2 or above, 7.6.8 or above, 7.4.12 or above and 7.2.13 or above.
FortiAnalyzer also received updates across those four branches. The listed fixed versions are 8.0.2 or above, 7.6.8 or above, 7.4.12 or above and 7.2.13 or above. Fortinet’s earlier table listed affected ranges of 8.0.0–8.0.1, 7.6.0–7.6.7, 7.4.0–7.4.11 and 7.2.0–7.2.13.
Fortinet urged rapid upgrades and temporary mitigations
Fortinet said customers should treat the release as a priority rather than routine maintenance. The company recommended completing upgrades promptly when the releases were available and, where patching could not be completed immediately, limiting exposure by managing devices out of band, moving resources behind VPN or SASE where feasible, and applying virtual patches.
Fortinet said the vulnerabilities were identified through its frontier AI-assisted security testing program. The company also warned that attackers’ access to similar AI capabilities could shorten the interval between disclosure and exploitation, although that statement described Fortinet’s assessment rather than a reported exploitation of these updates.
Share this article
