Fortinet security advisories, October 2026

Every Fortinet security advisory published in October 2026, from FortiGuard PSIRT Advisories, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 21
Critical: 4
High: 7
In CISA KEV: 3
CVEs: 28

Fortinet advisories published in October 2026

Oct 26, 2026
Critical [CVE-2026-105481 +9] Node2Shell CVEs
Critical9.8ExploitedCISA KEV
Oct 21, 2026
Medium [CVE-2026-109618 +2] PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
Medium5.3ExploitedCISA KEV
Oct 13, 2026
Critical [CVE-2026-106173] Arbitrary file write in grpc phQueryMaster
Critical9.4
Oct 13, 2026
Critical [CVE-2026-107656] Improper access control and session management in the web management interface
Critical9.6
Oct 13, 2026
High [CVE-2025-46773 +3] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.11, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.6, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4 may allow a low privileged user to execute arbitrary commands via crafted requests
High7.9
Oct 13, 2026
High [CVE-2025-46773 +3] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.11, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.6, FortiManager 7.2 all versions may allow a low privileged user to execute arbitrary commands via crafted requests
High7.9
Oct 13, 2026
High [CVE-2025-46773 +3] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.6, FortiManager 7.2 all versions may allow a low privileged user to execute arbitrary commands via crafted requests
High7.9
Oct 13, 2026
High [CVE-2025-46773] Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.11 may allow a low privileged user to execute arbitrary commands via crafted requests
High7.9
Oct 13, 2026
High [CVE-2025-57739] improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests
High7.7
Oct 13, 2026
High [CVE-2025-46773 +3] Multiple Arbitrary File Read/Write via SQL Injection
High7.9
Oct 13, 2026
High [CVE-2025-57739] SQL command injection in webmail
High7.7
Oct 13, 2026
Medium [CVE-2026-106170] Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests
Medium4.8
Oct 13, 2026
Medium [CVE-2026-106171] improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 through 7.6.6 may allow attacker to escalation of privilege via specially crafted packets
Medium5.3
Oct 13, 2026
Medium [CVE-2026-106172] Fabric API Authentication bypass
Medium4.9
Oct 13, 2026
Medium [CVE-2026-106174] GUI Denial of Service
Medium6.7
Oct 13, 2026
Medium [CVE-2020-12811] HTML injection in WebUI
Medium4.9
Oct 13, 2026
Medium [CVE-2026-106170] Persistent Denial of Service in Admin Profile
Medium4.8
Oct 13, 2026
Medium [CVE-2026-106171] arbitrary command execution in fgfmsd daemon
Medium5.3
Oct 13, 2026
Low [CVE-2026-106176] Broken authorization
Low3.4
Oct 13, 2026
Low [CVE-2026-106175] Double free in signal handler
Low2.1
Oct 1, 2026
Critical [CVE-2026-104286] Improper limitation of a pathname to a restricted directory
Critical9.8ExploitedCISA KEV

Get an email when Fortinet publishes the next one.

See Fortinet's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Fortinet

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.