# Fortinet patches critical AI-found flaws in FortiOS, FortiManager, FortiAnalyzer, FortiMail and FortiAuthenticator · pwn.watch > Fortinet shipped a coordinated security hardening release fixing critical and high-severity vulnerabilities found by its frontier AI-assisted testing program. Fixes for FortiMail and FortiAuthenticator came out Oct 21 and for FortiOS, FortiManager and FortiAnalyzer on Oct 22, 2026. CVE IDs and advisories are withheld until Fortinet's November 10 Patch Tuesday, and Fortinet warns attackers can use AI to reverse-engineer the patches, so it urges upgrading now, starting with internet-facing devices. Page: https://pwn.watch/i/fortinet-ai-found-flaws-hardening-release-oct-2026 · generated 2026-10-26T13:58:16.796Z ## Status - Severity: critical · status: live · patch: patched - Product: Fortinet FortiOS, FortiManager, FortiAnalyzer, FortiMail, FortiAuthenticator - Started: 2026-10-21 - Affected: FortiOS 8.0.0–8.0.1, 7.6.0–7.6.7, 7.4.0–7.4.12, 7.2.0–7.2.13; FortiManager and FortiAnalyzer 8.0.0–8.0.1, 7.6.0–7.6.7, 7.4.0–7.4.11, 7.2.0–7.2.12; FortiMail 8.0.0–8.0.1, 7.6.0–7.6.6, 7.4.0–7.4.8, 7.2.0–7.2.9; FortiAuthenticator 8.0.0–8.0.3, 6.6.0–6.6.10 - Fixed in: FortiOS 8.0.2, 7.6.8, 7.4.13, 7.2.14; FortiManager and FortiAnalyzer 8.0.2, 7.6.8, 7.4.12, 7.2.13; FortiMail 8.0.2, 7.6.7, 7.4.9 (7.2 users move to 7.4 or later); FortiAuthenticator 8.0.4, 6.6.11 ## Follow this incident - RSS (one item per update): https://pwn.watch/i/fortinet-ai-found-flaws-hardening-release-oct-2026/feed.xml - JSON Feed: https://pwn.watch/i/fortinet-ai-found-flaws-hardening-release-oct-2026/feed.json - Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/fortinet-ai-found-flaws-hardening-release-oct-2026.json - This file: https://pwn.watch/i/fortinet-ai-found-flaws-hardening-release-oct-2026/llms.txt ## Updates (newest first) - 2026-10-26: Help Net Security notes the release got little attention amid PHP2Shell and that the products aren't affected by PHP2Shell; interim mitigations (trusted-IP admin access, FortiManager off the internet, MFA) don't replace upgrading. (https://www.helpnetsecurity.com/2026/10/26/fortinet-patches-critical-fortios-flaws-found-with-ai-help/) - 2026-10-23: NHS England Digital issues cyber alert CC-4879 urging organisations to assess exposure and apply the updates. (https://digital.nhs.uk/cyber-alerts/2026/cc-4879) - 2026-10-22: Fixed FortiOS, FortiManager and FortiAnalyzer releases become available; FortiSASE is updated automatically and FortiManager Cloud may need a manual update. (https://www.fortinet.com/blog/ciso-collective/fortinet-releases-security-hardening-release-for-multiple-products) - 2026-10-21: Fortinet CISO Carl Windsor announces the security hardening release and ships FortiMail and FortiAuthenticator fixes; advisories are held until the Nov 10 Patch Tuesday. (https://www.fortinet.com/blog/ciso-collective/fortinet-releases-security-hardening-release-for-multiple-products) ## Fix brief # Security brief: Fortinet patches critical AI-found flaws in FortiOS, FortiManager, FortiAnalyzer, FortiMail and FortiAuthenticator Source: https://pwn.watch/i/fortinet-ai-found-flaws-hardening-release-oct-2026 · status: live · severity: critical · updated Oct 26, 2026, 11:45 UTC ## Patch status **PATCHED: fixed releases exist. Upgrade to a fixed version.** ## What it is Fortinet shipped a coordinated security hardening release fixing critical and high-severity vulnerabilities found by its frontier AI-assisted testing program. Fixes for FortiMail and FortiAuthenticator came out Oct 21 and for FortiOS, FortiManager and FortiAnalyzer on Oct 22, 2026. CVE IDs and advisories are withheld until Fortinet's November 10 Patch Tuesday, and Fortinet warns attackers can use AI to reverse-engineer the patches, so it urges upgrading now, starting with internet-facing devices. Severity detail: Rated critical and high by Fortinet; CVEs and CVSS scores due Nov 10, 2026; no exploitation reported yet - Product: Fortinet FortiOS, FortiManager, FortiAnalyzer, FortiMail, FortiAuthenticator ## Affected versions - FortiOS 8.0.0–8.0.1, 7.6.0–7.6.7, 7.4.0–7.4.12, 7.2.0–7.2.13 - FortiManager and FortiAnalyzer 8.0.0–8.0.1, 7.6.0–7.6.7, 7.4.0–7.4.11, 7.2.0–7.2.12 - FortiMail 8.0.0–8.0.1, 7.6.0–7.6.6, 7.4.0–7.4.8, 7.2.0–7.2.9 - FortiAuthenticator 8.0.0–8.0.3, 6.6.0–6.6.10 ## Check whether you're affected No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above. ## Fix Upgrade to one of these fixed versions (or later on the same branch): - FortiOS 8.0.2, 7.6.8, 7.4.13, 7.2.14 - FortiManager and FortiAnalyzer 8.0.2, 7.6.8, 7.4.12, 7.2.13 - FortiMail 8.0.2, 7.6.7, 7.4.9 (7.2 users move to 7.4 or later) - FortiAuthenticator 8.0.4, 6.6.11 After upgrading, re-run the checks above and redeploy/restart the affected services. ## Latest updates - Oct 26, 2026: Help Net Security notes the release got little attention amid PHP2Shell and that the products aren't affected by PHP2Shell; interim mitigations (trusted-IP admin access, FortiManager off the internet, MFA) don't replace upgrading. - Oct 23, 2026: NHS England Digital issues cyber alert CC-4879 urging organisations to assess exposure and apply the updates. - Oct 22, 2026: Fixed FortiOS, FortiManager and FortiAnalyzer releases become available; FortiSASE is updated automatically and FortiManager Cloud may need a manual update. - Oct 21, 2026: Fortinet CISO Carl Windsor announces the security hardening release and ships FortiMail and FortiAuthenticator fixes; advisories are held until the Nov 10 Patch Tuesday. ## Advisories - [Fortinet Releases Security Hardening Release for Multiple Products](https://www.fortinet.com/blog/ciso-collective/fortinet-releases-security-hardening-release-for-multiple-products) (Fortinet) - [Fortinet Releases Security Hardening Release for Multiple Products (CC-4879)](https://digital.nhs.uk/cyber-alerts/2026/cc-4879) (NHS England Digital) ## Write-ups & news - [Fortinet says patch now, CVEs come later, sparking fears of hacks](https://cybernews.com/security/fortinet-critical-flaws-patches-november-disclosure/) - [Fortinet patches critical FortiOS flaws found with AI help](https://www.helpnetsecurity.com/2026/10/26/fortinet-patches-critical-fortios-flaws-found-with-ai-help/) ## Caveats No CVE IDs yet; add them, CVSS scores and per-bug details when Fortinet publishes advisories on Nov 10, 2026. --- Machine-readable: https://pwn.watch/i/fortinet-ai-found-flaws-hardening-release-oct-2026.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.