Security Alert: Fortinet Security Updates – November 2026

Fortinet has released security updates addressing nearly 100 vulnerabilities across its products, including 17 critical-severity and nearly 80 high-severity flaws that could lead to unauthorized access, code execution, or system disruption.

Affected Systems:

The affected systems and versions include, but are not limited to:

• FortiOS: versions 8.0.0 – 8.0.1, 7.6.0 – 7.6.7, 7.4.0 – 7.4.12, 7.2.0 – 7.2.13

• FortiAnalyzer and FortiManager: versions 8.0.0 – 8.0.1, 7.6.0 – 7.6.7, 7.4.0 – 7.4.11, 7.2.0 – 7.2.12

Security Risks

Successful exploitation could allow attackers to execute malicious code, gain unauthorized access, escalate privileges, disclose sensitive information, or disrupt services. For more information on the vulnerabilities addressed in this release, refer to the OpenCVE – Fortinet Vendor Feed.

Recommended Actions

The National Cyber Security Authority (NCSA) strongly recommends that system administrators:

1. Follow Fortinet Security Advisory to lower the risk of potential exploits, protect systems, and ensure their security.
    

2. Apply the required and latest security updates as soon as possible. |
   The released software versions for upgrade include, but are not limited to:

• FortiOS: Upgrade to version 8.0.2 or above, 7.6.8 or above, 7.4.13 or above, 7.2.14 or  7.0.18 or above.

• FortiAnalyzer and FortiManager: Upgrade to version 8.0.2 or above, 7.6.8 or above, 7.4.12 or above , 7.2.13 or above 

3. Before performing any update tasks, ensure that you have a backup of your data.

For further information and support, please contact NCSA by email at rwcsirt@ncsa.gov.rw or call us at 9009.

References

• https://www.fortiguard.com/psirt

• Fortinet Patches Nearly 100 Vulnerabilities

• https://app.opencve.io/cve/?vendor=fortinet

• Fortinet end-of-life & end-of-support dates — FortinetEOL