Preparing for the forthcoming security hardening releases, including frontier AI fixes and how this will change the release process going forward
On October 22, 2026, Fortinet will release a coordinated set of security updates for FortiOS, FortiManager, and FortiAnalyzer following recent releases from FortiMail and FortiAuthenticator. We strongly urge every customer to plan and promptly complete these upgrades as soon as the releases are available, prioritizing internet-facing devices.
These releases include fixes to address vulnerabilities identified through our frontier AI-assisted security testing program. Fortinet would like to thank Anthropic, OpenAI, Google, and SpaceX for their collaboration throughout this process.
Fortinet has integrated frontier AI models into our product security testing process. These models analyze code paths, protocol handling, and configuration logic at a depth and speed that traditional fuzzing and manual review cannot match.
This work has helped surface vulnerabilities more efficiently than conventional methods, allowing us to proactively fix them before they may be found and exploited by malicious actors. This is our secure-by-design commitment in practice: finding and closing weaknesses at the source.
We are also being transparent about one implication. The same class of AI capability is becoming available to attackers, particularly as open weight models improve. The window between disclosure and exploitation continues to shrink, and we expect it to keep shrinking.
We recommend customers treat this release as a priority change rather than a routine maintenance cycle. Four factors drive this urgency:
Our recommendation is to apply temporary mitigations, including limiting exposure by managing devices out of band, moving resources behind VPN or SASE where feasible, and applying virtual patches until the patching can be prioritized.
Affected products and fixed versions
| Product | Affected Versions | Fixed Version | Availability |
|---|---|---|---|
| FortiOS 8.0 | 8.0.0–8.0.1 | 8.0.2 or above | October 22 |
| FortiOS 7.6 | 7.6.0–7.6.7 | 7.6.8 or above | October 22 |
| FortiOS 7.4 | 7.4.0–7.4.12 | 7.4.13 or above | October 22 |
| FortiOS 7.2 | 7.2.0–7.2.13 | 7.2.14 or above | October 22 |
| Product | Affected Versions | Fixed Version | Availability |
|---|---|---|---|
| FortiManager 8.0 | 8.0.0–8.0.1 | 8.0.2 or above | October 22 |
| FortiManager 7.6 | 7.6.0–7.6.7 | 7.6.8 or above | October 22 |
| FortiManager 7.4 | 7.4.0–7.4.11 | 7.4.12 or above | October 22 |
| FortiManager 7.2 | 7.2.0–7.2.12 | 7.2.13 or above | October 22 |
| Product | Affected Versions | Fixed Version | Availability |
|---|---|---|---|
| FortiAnalyzer 8.0 | 8.0.0–8.0.1 | 8.0.2 or above | October 22 |
| FortiAnalyzer 7.6 | 7.6.0–7.6.7 | 7.6.8 or above | October 22 |
| FortiAnalyzer 7.4 | 7.4.0–7.4.11 | 7.4.12 or above | October 22 |
| FortiAnalyzer 7.2 | 7.2.0–7.2.12 | 7.2.13 or above | October 22 |
| Product | Affected Versions | Fixed Version | Availability |
|---|---|---|---|
| FortiMail 8.0 | 8.0.0–8.0.1 | 8.0.2 or above | Today |
| FortiMail 7.6 | 7.6.0–7.6.6 | 7.6.7 or above | Today |
| FortiMail 7.4 | 7.4.0–7.4.8 | 7.4.9 or above | Today |
| FortiMail 7.2 | 7.2.0–7.2.9 | Upgrade to 7.4 branch or later | Today |
| Product | Affected Versions | Fixed Version | Availability |
|---|---|---|---|
| FortiAuthenticator 8.0 | 8.0.0–8.0.3 | 8.0.4 or above | Today |
| FortiAuthenticator 6.6 | 6.6.0–6.6.10 | 6.6.11 or above | Today |
Note that public advisories will be made available at the next Patch Tuesday on November 10 as part of Fortinet’s ongoing commitment to responsible transparency while balancing customer security. The advisories will be published on the Fortinet Product Security Incident Response Team (PSIRT) page.
Prepare today so you can upgrade as soon as these releases are published on October 22.
If you cannot upgrade immediately, reduce exposure in the interim by: These steps reduce risk but do not replace the need for a timely upgrade.
We believe customers are best protected when vendors proactively find and fix vulnerabilities and disclose them responsibly. Using frontier AI in our own testing is another way we stay ahead of attackers using the same tools. We will continue to apply these methods across the Fortinet portfolio and share our findings with customers in the spirit of security transparency.
Thank you for acting quickly. For upgrade assistance, contact Fortinet Technical Support or your account team. Subscribe to FortiGuard PSIRT advisories for release-day details.
- Carl Windsor, Chief Information Security Officer, Fortinet
| Join Carl Windsor on Wednesday, December 9 at 8 a.m. PT | 11 a.m. ET | 4 p.m. GMT for the next Fortinet Global CISO Collective, our quarterly conversation built by and for CISOs. |
Learn how to prepare for AI enabled cyber events