Skip to content
Multiple Vulnerabilities Discovered in Fortinet Products

Multiple Vulnerabilities Discovered in Fortinet Products

First seen 12 Nov 2026, 13:49 UTC •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 12, 2026 at 13:50 UTC
  • •Fortinet has remediated multiple vulnerabilities in FortiOS, FortiMail, and FortiManager.
  • •The vulnerabilities include authentication bypass, command injection, and SQL injection.
  • •Customers are not required to take action as all issues have been patched.

Fortinet has disclosed several vulnerabilities affecting its products, including FortiOS, FortiMail, and FortiManager. An Authentication Bypass vulnerability in FortiOS (CWE-305) allows unauthenticated attackers to broadcast LSA via crafted requests, remediated in version 26.3.2. Two command injection vulnerabilities in FortiMail (CWE-77) and SQL injection vulnerabilities (CWE-89) were also reported, both of which were patched on October 5, 2026, in FortiMail Cloud. Additionally, an improper authorization vulnerability in FortiManager FGFM allows code execution via crafted packets. All affected customers do not need to take action as the issues have been remediated. These vulnerabilities were internally discovered by Fortinet's Product Security team using the AI model Claude Mythos.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 6h ago How this analysis works

Timeline

2026-10-05
Patches released for FortiMail vulnerabilities
Fortinet updated FortiMail Cloud to versions 7.6.7 GA and 8.0.2 GA to fix command injection and SQL injection vulnerabilities.
Article 2
2026-11-12
Fortinet discloses vulnerabilities
Fortinet announced multiple vulnerabilities affecting FortiOS, FortiMail, and FortiManager, all of which have been remediated.
Article 1

More articles in this cluster (4)

Following this threat?

Track Fortinet in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 4

Common questions

Which Fortinet products are affected?
The vulnerabilities affect FortiOS, FortiMail, and FortiManager.
Have these vulnerabilities been exploited?
No active exploitation has been reported for these vulnerabilities.
What actions do customers need to take?
Customers do not need to take any action as all vulnerabilities have been patched.