Vendors and CVEs › Vendors › FortiOS
FortiOS: industrial cyber security news and vulnerabilities
2 stories in Industrial Cyber Brief name FortiOS, from Wednesday 11 November 2026. Newest first; each links the full story with who is affected and what to do.
The stories
High
Fortinet fixes login bypass flaw in its SSH service
Fortinet reports a flaw in the SSH daemon of FortiOS, FortiSASE, FortiProxy and FortiPam. An unauthenticated attacker may bypass authentication using specially crafted credentials. The CVSS score is 7.4.
Critical
Fortinet FortiOS and FortiSASE routing flaw lets attackers send false routes
Fortinet reports an authentication bypass in the ospf daemon of FortiOS and FortiSASE, rated 9.3.