Fortinet patches critical FortiOS flaws found with AI help
FortiOS, FortiManager, FortiAnalyzer, FortiMail, FortiAuthenticator
Fortinet rolled out updates for FortiOS and other products to address vulnerabilities found with AI assistance. Details will be disclosed on November 10, 2026.
why this severityCritical security updates provided by vendor.
- fix status
- Patched
- affected
- FortiOSFortiManagerFortiAnalyzerFortiMailFortiAuthenticator
- first report
- 26 Oct 2026
- last update
- 26 Oct 2026
What to do
Apply the security hardening updates released by Fortinet.
Timeline · 1
Sources · 1
News and write-ups
- 2026-10-26Fortinet patches critical FortiOS flaws found with AI helpHelp Net Security · helpnetsecurity.com/2026/10/26/fortinet-patches-critical-fortios-flaws-found-wit
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Patch now
- AI role
- No AI role
- categories
- General security
- severity
- 2 · Disclosed vulnerability
- fix status
- Patched
- targets
- Not applicable
- owasp llm top 10
- no entry for these categories
- mitre atlas
- no technique for these categories
- dates
- happened 26 Oct 2026 · first reported 26 Oct 2026
- origin
- News & research feeds
- record
- confidence 0.90 · created 2026-10-26 14:52Z · updated 2026-11-10 00:11Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Fortinet patches critical FortiOS flaws found with AI help https://gcdradar.vercel.app/incidents/fortinet-patches-critical-fortios-flaws-found-with-ai-help · AIR-2026-1526 · closed 2026-11-09 - Lane: Patch now - Severity: 2 (Disclosed vulnerability): Critical security updates provided by vendor. - Fix status: Patched - First reported: 2026-10-26 - AI role: No AI role - Products: FortiOS, FortiManager, FortiAnalyzer, FortiMail, FortiAuthenticator ## Summary Fortinet rolled out updates for FortiOS and other products to address vulnerabilities found with AI assistance. Details will be disclosed on November 10, 2026. ## What to do Apply the security hardening updates released by Fortinet. ## Affected and fixed versions - Affected: FortiOS - Affected: FortiManager - Affected: FortiAnalyzer - Affected: FortiMail - Affected: FortiAuthenticator ## Latest updates - 2026-10-26: Fortinet patches critical FortiOS flaws found with AI help (https://helpnetsecurity.com/2026/10/26/fortinet-patches-critical-fortios-flaws-found-with-ai-help) ## Sources - 2026-10-26 Help Net Security: Fortinet patches critical FortiOS flaws found with AI help https://helpnetsecurity.com/2026/10/26/fortinet-patches-critical-fortios-flaws-found-with-ai-help Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- live9.1FortiManager Fortinet Authorization Bypass Flaw in dmserver
Patch now · Disclosed · since 10 Nov 2026
- live9.0FortiManager FortiManager FGFM elevation before registration password verification
Patch now · Disclosed · since 10 Nov 2026
- live9.3FortiOS FortiOS/FortiSASE OSPF daemon authentication bypass via crafted LSA
Patch now · Disclosed · since 10 Nov 2026
- live9.8FortiMail FortiMail path traversal enables unauthorized code execution
Patch now · Disclosed · since 10 Nov 2026
- live9.8FortiMail FortiMail command injection allows unauthenticated code execution
Patch now · Disclosed · since 10 Nov 2026
- live9.0FortiAuthenticator FortiAuthenticator hard‑coded password enables authentication bypass
Patch now · Disclosed · since 10 Nov 2026