Fortinet security advisories, September 2026

Every Fortinet security advisory published in September 2026, from FortiGuard PSIRT Advisories, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 20
Critical: 4
High: 3
In CISA KEV: 0
CVEs: 11

Fortinet advisories published in September 2026

Sep 8, 2026
Critical [CVE-2026-26084] improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests
Critical9.9
Sep 8, 2026
Critical [CVE-2026-84388] Improper Authentication of FortiPAM Server
Critical9.6
Sep 8, 2026
Critical [CVE-2026-84390] JWT used for authentication in web GUI signed with static key
Critical9.8
Sep 8, 2026
Critical [CVE-2026-26084] Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information
Critical9.9
Sep 8, 2026
High [CVE-2026-84393] improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via <insert attack vector here>
High8.1
Sep 8, 2026
High [CVE-2026-84387] improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9 may allow attacker to execute unauthorized code or commands via <insert attack vector here>
High7.2
Sep 8, 2026
High [CVE-2026-84393] ZTNA Portal Improper Certificate Validation
High8.1
Sep 8, 2026
Medium [CVE-2026-22575] improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.10, FortiManager Cloud 7.2 all versions may allow an administrator to bypass the approval process for workflow sessions via crafted HTTP or HTTPs requests
Medium4.9
Sep 8, 2026
Medium [CVE-2026-84391] use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via <insert attack vector here>
Medium6.5
Sep 8, 2026
Medium [CVE-2026-84385] improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow attacker to escalation of privilege via <insert attack vector here>
Medium5.4
Sep 8, 2026
Medium [CVE-2026-84386] unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via <insert attack vector here>
Medium5.1
Sep 8, 2026
Medium [CVE-2026-84386] Arbitrary process termination from exposed minifilter communication port
Medium5.1
Sep 8, 2026
Medium [CVE-2026-84385] Broken Access control on Websocket streams
Medium5.4
Sep 8, 2026
Medium [CVE-2026-84387] Cron Job Injection in Remote Backup
Medium6.7
Sep 8, 2026
Medium [CVE-2026-84391] Uncontrolled Resource Consumption in SNMP
Medium6.5
Sep 8, 2026
Medium [CVE-2026-22575] Workflow session email approval process bypass
Medium4.9
Sep 8, 2026
Low [CVE-2026-84392] NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an authenticated attacker to crash the httpsd daemon via crafted HTTP requests
Low2.7
Sep 8, 2026
Low [CVE-2026-84389] url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Low3.1
Sep 8, 2026
Low [CVE-2026-84392] Null Pointer Dereference in Log Report
Low2.5
Sep 8, 2026
Low [CVE-2026-84389] Open Redirect on FortiSIEM
Low3.1

Get an email when Fortinet publishes the next one.

See Fortinet's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Fortinet

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.