{"slug": "fortinet-releases-security-hardening-release-for-multiple-products", "title": "Fortinet Releases Security Hardening Release for Multiple Products", "summary": "Fortinet will release coordinated security updates on October 22, 2026 for FortiOS, FortiManager and FortiAnalyzer, following already-available fixes for FortiMail and FortiAuthenticator, addressing vulnerabilities found through its frontier AI-assisted security testing program. Fortinet credited Anthropic, OpenAI, Google and SpaceX for collaborating on the program, which it said analyzes code paths, protocol handling and configuration logic at a depth and speed traditional fuzzing and manual review cannot match. Fixed versions include FortiOS 8.0.2, 7.6.8, 7.4.13 and 7.2.14, with public advisories to be published on the Fortinet PSIRT page at the November 10 Patch Tuesday.", "body_md": "# Fortinet Releases Security Hardening Release for Multiple Products\n\nPreparing for the forthcoming security hardening releases, including frontier AI fixes and how this will change the release process going forward\n\nOn October 22, 2026, Fortinet will release a coordinated set of security updates for FortiOS, FortiManager, and FortiAnalyzer following recent releases from FortiMail and FortiAuthenticator. We strongly urge every customer to plan and promptly complete these upgrades as soon as the releases are available, prioritizing internet-facing devices.\n\nThese releases include fixes to address vulnerabilities identified through our [frontier AI-assisted security testing program](https://www.fortinet.com/blog/ciso-collective/update-on-fortinet-use-of-frontier-ai). Fortinet would like to thank Anthropic, OpenAI, Google, and SpaceX for their collaboration throughout this process.\n\nFortinet has integrated frontier AI models into our product security testing process. These models analyze code paths, protocol handling, and configuration logic at a depth and speed that traditional fuzzing and manual review cannot match.\n\nThis work has helped surface vulnerabilities more efficiently than conventional methods, allowing us to proactively fix them before they may be found and exploited by malicious actors. This is our secure-by-design commitment in practice: finding and closing weaknesses at the source.\n\nWe are also being transparent about one implication. The same class of AI capability is becoming available to attackers, particularly as open weight models improve. The window between disclosure and exploitation continues to shrink, and we expect it to keep shrinking.\n\nWe recommend customers treat this release as a priority change rather than a routine maintenance cycle. Four factors drive this urgency:\n\nOur recommendation is to apply temporary mitigations, including limiting exposure by managing devices out of band, moving resources behind VPN or SASE where feasible, and applying virtual patches until the patching can be prioritized.\n\n**Affected products and fixed versions**\n\n| Product | Affected Versions | Fixed Version | Availability | \n|---|---|---|---|\n| FortiOS 8.0 | 8.0.0–8.0.1 | 8.0.2 or above | October 22 | \n| FortiOS 7.6 | 7.6.0–7.6.7 | 7.6.8 or above | October 22 | \n| FortiOS 7.4 | 7.4.0–7.4.12 | 7.4.13 or above | October 22 | \n| FortiOS 7.2 | 7.2.0–7.2.13 | 7.2.14 or above | October 22 | \n\n| Product | Affected Versions | Fixed Version | Availability | \n|---|---|---|---|\n| FortiManager 8.0 | 8.0.0–8.0.1 | 8.0.2 or above | October 22 | \n| FortiManager 7.6 | 7.6.0–7.6.7 | 7.6.8 or above | October 22 | \n| FortiManager 7.4 | 7.4.0–7.4.11 | 7.4.12 or above | October 22 | \n| FortiManager 7.2 | 7.2.0–7.2.12 | 7.2.13 or above | October 22 | \n\n| Product | Affected Versions | Fixed Version | Availability | \n|---|---|---|---|\n| FortiAnalyzer 8.0 | 8.0.0–8.0.1 | 8.0.2 or above | October 22 | \n| FortiAnalyzer 7.6 | 7.6.0–7.6.7 | 7.6.8 or above | October 22 | \n| FortiAnalyzer 7.4 | 7.4.0–7.4.11 | 7.4.12 or above | October 22 | \n| FortiAnalyzer 7.2 | 7.2.0–7.2.12 | 7.2.13 or above | October 22 | \n\n| Product | Affected Versions | Fixed Version | Availability | \n|---|---|---|---|\n| FortiMail 8.0 | 8.0.0–8.0.1 | 8.0.2 or above | Today | \n| FortiMail 7.6 | 7.6.0–7.6.6 | 7.6.7 or above | Today | \n| FortiMail 7.4 | 7.4.0–7.4.8 | 7.4.9 or above | Today | \n| FortiMail 7.2 | 7.2.0–7.2.9 | Upgrade to 7.4 branch or later | Today | \n\n| Product | Affected Versions | Fixed Version | Availability | \n|---|---|---|---|\n| FortiAuthenticator 8.0 | 8.0.0–8.0.3 | 8.0.4 or above | Today | \n| FortiAuthenticator 6.6 | 6.6.0–6.6.10 | 6.6.11 or above | Today | \n\nNote that public advisories will be made available at the next Patch Tuesday on November 10 as part of Fortinet’s ongoing commitment to responsible transparency while balancing customer security. The advisories will be published on the [Fortinet Product Security Incident Response Team (PSIRT) page.](https://www.fortiguard.com/psirt)\n\nPrepare today so you can upgrade as soon as these releases are published on October 22.\n\nIf you cannot upgrade immediately, reduce exposure in the interim by:\n\nThese steps reduce risk but do not replace the need for a timely upgrade.\n\nWe believe customers are best protected when vendors proactively find and fix vulnerabilities and disclose them responsibly. Using frontier AI in our own testing is another way we stay ahead of attackers using the same tools. We will continue to apply these methods across the Fortinet portfolio and share our findings with customers in the spirit of security transparency.\n\nThank you for acting quickly. For upgrade assistance, contact Fortinet Technical Support or your account team. Subscribe to [FortiGuard PSIRT advisories](https://www.fortiguard.com/psirt) for release-day details.\n\n*- Carl Windsor, Chief Information Security Officer, Fortinet*\n\n| [Join](https://global.fortinet.com/lp-en-wc-2026Q4-ciso-collective?lsci=701Pr00000valFjIAI&meeting_offer__c=&UID=ftnt-3346-563028) Carl Windsor on Wednesday, December 9 at 8 a.m. PT \\| 11 a.m. ET \\| 4 p.m. GMT for the next Fortinet Global CISO Collective, our quarterly conversation built by and for CISOs. | \n\n[**Learn**](https://www.fortinet.com/content/dam/fortinet/assets/solutions/fortinet-ai-enabled-security.pdf) how to prepare for AI enabled cyber events", "url": "https://wpnews.pro/news/fortinet-releases-security-hardening-release-for-multiple-products", "canonical_source": "https://www.fortinet.com/blog/ciso-collective/fortinet-releases-security-hardening-release-for-multiple-products", "published_at": "2026-10-21 17:29:21+00:00", "updated_at": "2026-10-21 17:42:21.225476+00:00", "lang": "en", "topics": ["ai-safety", "artificial-intelligence", "ai-research"], "entities": ["Fortinet", "FortiOS", "FortiManager", "FortiAnalyzer", "FortiMail", "FortiAuthenticator", "Anthropic", "OpenAI"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/fortinet-releases-security-hardening-release-for-multiple-products", "markdown": "https://wpnews.pro/news/fortinet-releases-security-hardening-release-for-multiple-products.md", "text": "https://wpnews.pro/news/fortinet-releases-security-hardening-release-for-multiple-products.txt", "jsonld": "https://wpnews.pro/news/fortinet-releases-security-hardening-release-for-multiple-products.jsonld"}}