Skip to main navigation Skip to main content Skip to page footer

Security Alert: Critical Remote Code Execution Vulnerabilities in PHP

Data Protection Office
Contact us Report an incident
Data Protection Office
Contact us Report an incident

Alert: Fortinet Security Updates – August 2026

Fortinet has released a security update addressing multiple vulnerabilities across its products, including but not limited to FortiWeb, FortiClient for Windows, FortiManager, and FortiManager Cloud.

Affected Systems: 

FortiWeb

  • FortiWeb (7.2 all versions, 7.4 all versions, 7.6.0 - 7.6.6, 8.0.0 - 8.0.2)

FortiManager and FortiManager Cloud

  • FortiManager (7.2.5 - 7.2.9, 7.4.3 - 7.4.5, 7.6.1)
  • FortiManager Cloud (7.2.5 - 7.2.9, 7.4.3 - 7.4.5, 7.6.1)

FortiClientWindows

  • FortiClient for Windows (7.2.0 - 7.2.11, 7.4.0 - 7.4.3)

Security Risks

Successful exploitation of the vulnerabilities in Fortinet software could allow unauthorized individuals to gain access to and control of affected systems. For a complete list of the security patches released by Fortinet, please refer to the official Fortinet security advisory.

Recommended Actions

The National Cyber Security Authority (NCSA) strongly recommends that system administrators:

1. Follow Fortinet Security Advisory to lower the risk of potential exploits, protect systems, and ensure their security.

2. Apply the required and latest security updates as soon as possible. The released software versions for upgrade include, but are not limited to:

3. Before performing any update tasks, ensure that you have a backup of your data.
For further information and support, please contact NCSA by email at rwcsirt@ncsa.gov.rw or call us at 9009.

References

Fortinet PSIRT Advisories: