Fortinet warns of critical vulnerabilities and urges immediate security updates for affected products
Fortinet has announced critical vulnerabilities affecting several of its products, prompting the release of urgent security updates.Customers are advised to implement these updates as a priority to mitigate risk.
The Australian Cyber Security Centre (ACSC) is monitoring the situation but has no additional details beyond Fortinet’s public recommendations.
Fortinet’s vulnerabilities impact multiple versions of FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator.
❗ ALERT ❗
We are aware of critical vulnerabilities across multiple Fortinet products. As a priority, individuals and organisations should apply available security updates. For further mitigation advice, read the full alert 👉 https://t.co/ZvG92JhTDN https://t.co/nr1CXOUs5k
— Australian Signals Directorate (@ASDGovAu) October 23, 2026
Security updates
A list of affected products and fixed versions is available on Fortinet’s website.
While FortiSASE has received automatic updates, FortiManager may need manual updates.
ACSC is currently unaware of any active exploitation of these vulnerabilities in Australia.
Fortinet recommends that organisations identify their Fortinet products and apply available updates promptly.
Continued monitoring of official Fortinet guidance is advised.
For those unable to implement updates immediately, reducing exposure is recommended by limiting access to administrative interfaces.
Organisations should ensure that FortiManager administration isn’t accessible from the internet.
Implementing strong credentials and mandating Multi-Factor Authentication (MFA) is also important for user accounts.
Organisations affected by these vulnerabilities or seeking assistance can contact the ACSC hotline at 1300 CYBER1 or visit their website.
