Topic

Fortinet: news, advisories and analysis

9 articlesUpdated 14 Oct 2026

CyberSecureToday covers Fortinet across 9 articles published between 8 Sep 2026 and 14 Oct 2026. The coverage includes 8 vulnerability advisories and 1 incident or breach report. 8 advisories are rated critical or high severity, and 2 involve flaws listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on Fortinet most often intersect with Active Exploitation, Information Disclosure and FortiOS, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Fortinet FortiOS and FortiProxy Flaw Leaks Administrator Bearer Tokens”, was published 14 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Fortinet advisory hub: severity, KEV status and fixes in one table

Latest coverage

ThreatsCloud & SaaSHigh
Fortinet FortiOS and FortiProxy Flaw Leaks Administrator Bearer Tokens
Fortinet releases security updates for FortiOS and FortiProxy (CVE-2026-14851) resolving an information disclosure flaw that exposed administrative bearer tokens.
Mei-Lin Chen14 Oct 20268 min read
ThreatsCloud & SaaSCritical
Fortinet FortiMail Path Traversal Flaw Exploited for Unauthenticated Remote Code Execution
A critical zero-day flaw in Fortinet FortiMail secure email gateways allows unauthenticated remote attackers to write arbitrary files and execute code as root.
Priya Raman2 Oct 20269 min read
ThreatsCloud & SaaSHigh
Fortinet FortiSandbox Web Management Access Control Flaw Exposes Forensic Threat Telemetry (CVE-2026-26084)
Fortinet resolves a high-severity improper access control flaw in FortiSandbox (CVE-2026-26084) allowing unauthenticated attackers to expose forensic analysis data.
Daniel Okafor1 Oct 20268 min read
ThreatsCloud & SaaSCritical
Fortinet FortiPAM Authentication Bypass Enables Remote Session Hijacking and Traffic Proxying
Fortinet releases emergency fixes for critical CVSS 9.6 flaw CVE-2026-84388 in FortiPAM and its Chrome Extension, allowing remote attackers to hijack administrative sessions.
Daniel Okafor25 Sep 202618 min read
ThreatsCloud & SaaSCritical
Fortinet FortiSandbox Critical OS Command Injection Flaws CVE-2026-25089 & CVE-2026-39808 in Active Exploitation
CISA adds Fortinet FortiSandbox vulnerabilities CVE-2026-25089 and CVE-2026-39808 (CVSS 9.8) to KEV following active attacks against enterprise security fabrics.
Daniel Okafor17 Sep 202613 min read
ThreatsCloud & SaaSHigh
Fortinet FortiOS SSL-VPN Sensitive Information Disclosure Flaw CVE-2025-68686 Actively Targeted for Initial Access
CISA updates KEV with CVE-2025-68686, a critical information disclosure vulnerability in Fortinet FortiOS exploited to harvest active VPN session tokens.
CST Editorial Desk16 Sep 20269 min read
ThreatsCloud & SaaSCritical
FortiClient EMS CVE-2026-35616: the hotfix window was not the dangerous part
Fortinet's emergency hotfix for CVE-2026-35616 blocked the attack path without fixing the flaw, and the complete patch that followed needed its own re-release.
Priya Raman10 Sep 20266 min read
ThreatsGov & DefenceCritical
Twelve Zero-Days Weaponized in One Week Across Citrix, Cisco and Fortinet
Twelve fresh entries hit the Known Exploited Vulnerabilities catalog, covering Citrix NetScaler, Cisco FMC, Fortinet FortiOS, Adobe Commerce, N-able N-central and Chrome.
Daniel Okafor10 Sep 20266 min read
Cyber AttackGov & Defence
Gunra ransomware: what AA26-222A actually gives your detection engineers
Six agencies detailed Gunra's Fortinet entry, its forticloud-sync backdoor and an MFA bypass planted in a VDI server. Here is how to turn that into detection coverage.
Daniel Okafor8 Sep 20266 min read