Security updateFri, 23 Oct 2026
Fortinet security updates: secure management access and upgrade appliances
Fortinet announced security hardening updates on October 21, 2026, with most releases on October 22. Inventory internet-facing devices and management interfaces, then upgrade by product and branch.
Article
Fortinet announced security hardening updates on October 21, 2026, with most releases on October 22. Inventory internet-facing devices and management interfaces, then upgrade by product and branch.
- FortiOS: 8.0.2, 7.6.8, 7.4.13, 7.2.14
- FortiManager and FortiAnalyzer: 8.0.2, 7.6.8, 7.4.12, 7.2.13
- FortiMail: 8.0.2, 7.6.7, 7.4.9; migrate 7.2 to 7.4 or later
- FortiAuthenticator: 8.0.4 or 6.6.11
FortiSASE was scheduled for automatic updates; FortiManager Cloud may require manual action. Verify each deployment and vendor release notes.
- 01
Inventory internet-facing devices
List models, versions, HA relationships, cloud instances and managed appliances.
See what to doResources: 1
TWISA member solutions
Inventory internet-facing devices
List models, versions, HA relationships, cloud instances and managed appliances.
- 02
Restrict management exposure
Restrict HTTPS and SSH management to trusted networks, use MFA, and preserve administrative access.
See what to doResources: 3
TWISA member solutions
Restrict management exposure
Restrict HTTPS and SSH management to trusted networks, use MFA, and preserve administrative access.
- 03
Upgrade on a supported path
Back up configuration and verify product compatibility, HA dependencies and the vendor upgrade path.
- 04
Verify and preserve records
Check running versions, HA synchronization, logs, business traffic and unauthorized changes.
Allow authorized traffic and apply controls at each layer.
- 01
Inventory internet-facing devices
List models, versions, HA relationships, cloud instances and managed appliances.
- 02
Restrict management exposure
Restrict HTTPS and SSH management to trusted networks, use MFA, and preserve administrative access.
- 03
Upgrade on a supported path
Back up configuration and verify product compatibility, HA dependencies and the vendor upgrade path.
Feed logs and traffic data from each layer into monitoring and response.
- Verify and preserve recordsCheck running versions, HA synchronization, logs, business traffic and unauthorized changes.
TWISA member solutions
Inventory internet-facing devices → Device inventory
List models, versions, HA relationships, cloud instances and managed appliances.
Verify and preserve records → Device logs and monitoring
Check running versions, HA synchronization, logs, business traffic and unauthorized changes.
Restrict management exposure → Management access and VPN segmentation
Restrict HTTPS and SSH management to trusted networks, use MFA, and preserve administrative access.
Restrict management exposure → Administrator identity and access
Restrict HTTPS and SSH management to trusted networks, use MFA, and preserve administrative access.
Restrict management exposure → Separate management from core networks
Restrict HTTPS and SSH management to trusted networks, use MFA, and preserve administrative access.
Sources
- Related alert (Traditional Chinese)
- Related alert (Traditional Chinese)
- Related alert (Traditional Chinese)
Alert updated: 2026/10/29.