Fortinet Patches Nearly 100 Vulnerabilities, 17 Critical Flaws Identified

• •Fortinet patched nearly 100 vulnerabilities, 17 of which are critical.
• •Several critical flaws allow for arbitrary code execution.
• •No exploitation in the wild has been reported for these vulnerabilities.

On November 10, 2026, Fortinet disclosed 89 new security advisories addressing nearly 100 vulnerabilities across its product line, including FortiOS, FortiManager, and FortiAnalyzer. Among these, 17 vulnerabilities are classified as critical, with several allowing for arbitrary code execution. The vulnerabilities stem from various issues, including SQL injection, improper authorization, and command injection. Fortinet has integrated frontier AI models into its security testing, which reportedly helped identify these flaws. No evidence of these vulnerabilities being exploited in the wild has been reported. The company urges customers to prioritize applying the patches due to the potential for rapid exploitation. The critical vulnerabilities include CVE-2026-104286, which was previously flagged by CISA as. Affected systems include FortiMail, FortiAuthenticator, and FortiClient, among others.