Fortinet

Fortinet security updates

Security-fix and disclosure events for Fortinet. Targets recurring searches like “Fortinet security updates” with timeline evidence — not a marketing changelog.

45 timeline events on record.

1. Oct 13, 2026

   Multiple Arbitrary File Read/Write via SQL Injection

   Confirmed security fix

   Open related record

2. Oct 13, 2026

   SQL command injection in webmail

   Confirmed security fix

   Open related record

3. Oct 13, 2026

   Persistent Denial of Service in Admin Profile

   Confirmed security fix

   Open related record

4. Oct 13, 2026

   arbitrary command execution in fgfmsd daemon

   Confirmed security fix

   Open related record

5. Oct 13, 2026

   Fabric API Authentication bypass

   Confirmed security fix

   Open related record

6. Oct 13, 2026

   Arbitrary file write in grpc phQueryMaster

   Confirmed security fix

   Open related record

7. Oct 13, 2026

   GUI Denial of Service

   Confirmed security fix

   Open related record

8. Oct 13, 2026

   Double free in signal handler

   Confirmed security fix

   Open related record

9. Oct 13, 2026

   Broken authorization

   Confirmed security fix

   Open related record

10. Oct 13, 2026

    Improper access control and session management in the web management interface

    Confirmed security fix

    Open related record

11. Oct 13, 2026

    Multiple Arbitrary File Read/Write via SQL Injection

    Confirmed security fix

    Open related record

12. Oct 13, 2026

    Multiple Arbitrary File Read/Write via SQL Injection

    Confirmed security fix

    Open related record

13. Oct 13, 2026

    Multiple Arbitrary File Read/Write via SQL Injection

    Confirmed security fix

    Open related record

14. Oct 7, 2026

    Improper limitation of a pathname to a restricted directory

    Confirmed security fix

    Open related record

15. Oct 5, 2026

    Arbitrary process termination from exposed minifilter communication port

    Confirmed security fix

    Open related record

16. Oct 1, 2026

    HTTP/2 Bomb CVE-2026-49975

    Confirmed security fix

    Open related record

17. Sep 17, 2026

    Improper Authentication of FortiPAM Server

    Confirmed security fix

    Open related record

18. Sep 15, 2026

    Content-Encoding WAF Evasion

    Confirmed security fix

    Open related record

19. Sep 8, 2026

    Workflow session email approval process bypass

    Confirmed security fix

    Open related record

20. Sep 8, 2026

    Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information

    Confirmed security fix

    Open related record

21. Sep 8, 2026

    Broken Access control on Websocket streams

    Confirmed security fix

    Open related record

22. Sep 8, 2026

    Cron Job Injection in Remote Backup

    Confirmed security fix

    Open related record

23. Sep 8, 2026

    Open Redirect on FortiSIEM

    Confirmed security fix

    Open related record

24. Sep 8, 2026

    JWT used for authentication in web GUI signed with static key

    Confirmed security fix

    Open related record

25. Sep 8, 2026

    Uncontrolled Resource Consumption in SNMP

    Confirmed security fix

    Open related record

26. Sep 8, 2026

    Null Pointer Dereference in Log Report

    Confirmed security fix

    Open related record

27. Sep 8, 2026

    ZTNA Portal Improper Certificate Validation

    Confirmed security fix

    Open related record

28. Aug 12, 2026

    Broken access control in the RADIUS type admin group

    Confirmed security fix

    Open related record

29. Aug 12, 2026

    Heap overflow in kernel driver due to missing size validation

    Confirmed security fix

    Open related record

30. Aug 12, 2026

    Server-Side Request Forgery (SSRF)

    Confirmed security fix

    Open related record

31. Aug 12, 2026

    FGFM Authentication Weakening via CLI Configuration

    Confirmed security fix

    Open related record

32. Aug 12, 2026

    Stack buffer overflow in WAD

    Confirmed security fix

    Open related record

33. Aug 12, 2026

    UI DoS attack

    Confirmed security fix

    Open related record

34. Jul 22, 2026

    Out of bounds read in GUI

    Confirmed security fix

    Open related record

35. Jul 16, 2026

    Buffer overread in authd and wad daemon

    Confirmed security fix

    Open related record

36. Jul 16, 2026

    Buffer overread in authd and wad daemon

    Confirmed security fix

    Open related record

37. Jul 14, 2026

    Header injection in Web Filter warning page

    Confirmed security fix

    Open related record

38. Jul 14, 2026

    Header injection in captive portal authentication form

    Confirmed security fix

    Open related record

39. Jul 14, 2026

    SSL-VPN Reflected XSS

    Confirmed security fix

    Open related record

40. Jul 14, 2026

    Missed certificate verification in AD Connector communication with FortiClient EMS

    Confirmed security fix

    Open related record