Vendors and CVEs › Vendors › Fortinet
Fortinet: industrial cyber security news and vulnerabilities
6 stories in Industrial Cyber Brief name Fortinet, 1 on CISA’s list of known exploited flaws, from Monday 19 October 2026 to Wednesday 11 November 2026. Newest first; each links the full story with who is affected and what to do.
The stories
High
Fortinet fixes login bypass flaw in its SSH service
Fortinet reports a flaw in the SSH daemon of FortiOS, FortiSASE, FortiProxy and FortiPam. An unauthenticated attacker may bypass authentication using specially crafted credentials. The CVSS score is 7.4.
Critical
Fortinet FortiOS and FortiSASE routing flaw lets attackers send false routes
Fortinet reports an authentication bypass in the ospf daemon of FortiOS and FortiSASE, rated 9.3.
High
FortiManager flaw lets low-privilege admin take over managed FortiGates
Fortinet reports a template engine flaw in FortiManager and FortiManager Cloud, rated 8.4. A low-privileged Device Manager admin may gain super admin privilege on managed FortiGates by injecting malicious commands.
Low
Fortinet Korea to hold OT security summit in Seoul
Fortinet Korea will host an operational technology (OT) security summit in Seoul on 11 November. Coverage frames it around hacking risks from AI factories. No specific threat is described.
Low
Fortinet reports OT security sales up nearly 40 per cent
Fortinet's third-quarter 2026 results show billings up 29%, product revenue up 37% and operational technology (OT) security billings up nearly 40%. This is financial news with no threat detail.
High Known exploited
Fortinet flaws used to plant hidden malware on firewalls
Unit 42 found attackers exploited FortiManager flaw CVE-2024-47575 at a telecoms managed service provider in September 2024, stealing data tied to over 500 FortiGate firewalls.