Security Alert: Fortinet Security Updates - July 2026
Fortinet has released a security update addressing multiple vulnerabilities in its products. These vulnerabilities affect several Fortinet products, including FortiOS, FortiProxy, FortiSandbox, and FortiPAM.
Affected Systems:
The following systems and versions are included:
-
FortiOS versions: 7.6.0 – 7.6.6, 7.4.0 – 7.4.9, and all releases of 7.2, 7.0, and 6.4
-
FortiProxy versions: 7.6.0 – 7.6.5, 7.4.0 – 7.4.13, 7.2.0 – 7.2.9, and all releases of 7.0
-
FortiSandbox versions: 5.0.0 – 5.0.2, 4.4.3 – 4.4.8
-
FortiPAM versions: 1.8.0 – 1.8.2, 1.7.0 – 1.7.2, and all releases from 1.6 down to 1.0
Security Risks
The successful exploitation of these vulnerabilities could allow remote attackers to execute arbitrary code in certain cases, gain unauthorized access, or compromise affected systems.
For the full list of security updates released by Fortinet, please refer to Fortinet Security Advisories (PSIRT).
Recommended Actions
The National Cyber Security Authority (NCSA) recommends that users and system administrators take the following actions:
1. Upgrade, as soon as possible, to the latest supported version of installed software in order to continue receiving technical support and security patches.
The recommended upgrade versions are as follows:
-
FortiOS: Upgrade to version 7.6.7 or above, 7.4.10 or above, all releases of 7.2, 7.0, and 6.4 (migrate to a fixed release)
-
FortiProxy versions: Upgrade to version 7.6.6 or above, 7.4.14 or above, all releases of 7.2, 7.0 (migrate to a fixed release)
-
FortiSandox versions: Upgrade to version 5.0.3 or above, 4.4.9 or above
-
FortiPAM versions: Upgrade to version 1.8.3 or above, 1.7.3 or above, and migrate all releases from 1.6 down to 1.0 to a fixed release
2. Before updating or patching, please ensure that you have the latest backup that can easily be restored.
For further information and support, please contact the National Cyber Security Authority (NCSA) by emailto rwcsirt@ncsa.gov.rw or call us on 9009.
References
17 July 2026
More updates