Skip to main navigation Skip to main content Skip to page footer

Security Alert: Critical Remote Code Execution Vulnerabilities in PHP

Data Protection Office
Contact us Report an incident
Data Protection Office
Contact us Report an incident

Security Alert: Fortinet Security Updates - July 2026

Fortinet has released a security update addressing multiple vulnerabilities in its products. These vulnerabilities affect several Fortinet products, including FortiOS, FortiProxy, FortiSandbox, and FortiPAM.

Affected Systems:

The following systems and versions are included:

  • FortiOS versions: 7.6.0 – 7.6.6, 7.4.0 – 7.4.9, and all releases of 7.2, 7.0, and 6.4
  • FortiProxy versions: 7.6.0 – 7.6.5, 7.4.0 – 7.4.13, 7.2.0 – 7.2.9, and all releases of 7.0
  • FortiSandbox versions: 5.0.0 – 5.0.2, 4.4.3 – 4.4.8
  • FortiPAM versions: 1.8.0 – 1.8.2, 1.7.0 – 1.7.2, and all releases from 1.6 down to 1.0

Security Risks

The successful exploitation of these vulnerabilities could allow remote attackers to execute arbitrary code in certain cases, gain unauthorized access, or compromise affected systems.

For the full list of security updates released by Fortinet, please refer to Fortinet Security Advisories (PSIRT).

Recommended Actions

The National Cyber Security Authority (NCSA) recommends that users and system administrators take the following actions:

1. Upgrade, as soon as possible, to the latest supported version of installed software in order to continue receiving technical support and security patches.

The recommended upgrade versions are as follows:

2. Before updating or patching, please ensure that you have the latest backup that can easily be restored.

For further information and support, please contact the National Cyber Security Authority (NCSA) by emailto rwcsirt@ncsa.gov.rw or call us on 9009.

References