Fortinet Product Suite Multiple Vulnerabilities
Fortinet has disclosed a large set of vulnerabilities across the FortiOS, FortiManager, FortiAnalyzer, and FortiSandbox ecosystems that allow for arbitrary code execution, privilege escalation, and data compromise.
CVE search metadata
CVE search record: CVE-2025-61625. Severity: high. CVSS: 8.1. EPSS: 0.72%. KEV: no. Product: FortiAnalyzer Cloud (7.2.x < 7.2.13, 7.4.x < 7.4.12, 7.6.x < 7.6.8, 8.0.x < 8.0.3), FortiAnalyzer (7.2.x < 7.2.13, 7.4.x < 7.4.12, 7.6.x < 7.6.8, 8.0.x < 8.0.2), FortiManager Cloud (7.2.x < 7.2.13, 7.4.x < 7.4.12, 7.6.x < 7.6.8, 8.0.x < 8.0.2), FortiManager (7.2.x < 7.2.13, 7.4.x < 7.4.12, 7.6.x < 7.6.8, 8.0.x < 8.0.2), FortiOS (7.2.x < 7.2.14, 7.4.x < 7.4.13, 7.6.x < 7.6.8, 8.0.x < 8.0.2), FortiPAM (1.x), FortiSandbox Cloud (5.0.4 < 5.0.6), FortiSandbox PaaS (5.0.4 < 5.0.6), FortiSandbox (4.4.x < 4.4.9, 5.0.x < 5.0.6), FortiSASE (all versions). Brief: Fortinet Product Suite Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-11-fortinet-vulnerabilities/
CVE search record: CVE-2026-121528. Severity: high. CVSS: 8.1. KEV: no. Product: FortiAnalyzer Cloud (7.2.x < 7.2.13, 7.4.x < 7.4.12, 7.6.x < 7.6.8, 8.0.x < 8.0.3), FortiAnalyzer (7.2.x < 7.2.13, 7.4.x < 7.4.12, 7.6.x < 7.6.8, 8.0.x < 8.0.2), FortiManager Cloud (7.2.x < 7.2.13, 7.4.x < 7.4.12, 7.6.x < 7.6.8, 8.0.x < 8.0.2), FortiManager (7.2.x < 7.2.13, 7.4.x < 7.4.12, 7.6.x < 7.6.8, 8.0.x < 8.0.2), FortiOS (7.2.x < 7.2.14, 7.4.x < 7.4.13, 7.6.x < 7.6.8, 8.0.x < 8.0.2), FortiPAM (1.x), FortiSandbox Cloud (5.0.4 < 5.0.6), FortiSandbox PaaS (5.0.4 < 5.0.6), FortiSandbox (4.4.x < 4.4.9, 5.0.x < 5.0.6), FortiSASE (all versions). Brief: Fortinet Product Suite Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-11-fortinet-vulnerabilities/
CVE search record: CVE-2026-121530. Severity: medium. CVSS: 6.6. EPSS: 0.69%. KEV: no. Product: FortiAnalyzer Cloud (7.2.x < 7.2.13, 7.4.x < 7.4.12, 7.6.x < 7.6.8, 8.0.x < 8.0.3), FortiAnalyzer (7.2.x < 7.2.13, 7.4.x < 7.4.12, 7.6.x < 7.6.8, 8.0.x < 8.0.2), FortiManager Cloud (7.2.x < 7.2.13, 7.4.x < 7.4.12, 7.6.x < 7.6.8, 8.0.x < 8.0.2), FortiManager (7.2.x < 7.2.13, 7.4.x < 7.4.12, 7.6.x < 7.6.8, 8.0.x < 8.0.2), FortiOS (7.2.x < 7.2.14, 7.4.x < 7.4.13, 7.6.x < 7.6.8, 8.0.x < 8.0.2), FortiPAM (1.x), FortiSandbox Cloud (5.0.4 < 5.0.6), FortiSandbox PaaS (5.0.4 < 5.0.6), FortiSandbox (4.4.x < 4.4.9, 5.0.x < 5.0.6), FortiSASE (all versions). Brief: Fortinet Product Suite Multiple Vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-11-fortinet-vulnerabilities/
Triage facts
Revision 1- Applicability
- FortiAnalyzer Cloud (7.2.x < 7.2.13, 7.4.x < 7.4.12, 7.6.x < 7.6.8, 8.0.x < 8.0.3), FortiAnalyzer (7.2.x < 7.2.13, 7.4.x < 7.4.12, 7.6.x < 7.6.8, 8.0.x < 8.0.2) +8
- Evidence
- Unknown
- Severity
- High
- Action
- Immediate escalation
- Sources
- 5 public sources
- Freshness
- Revision 1Nov 12, 16:25 UTC
- Vulnerabilities
- 3 CVEs
- Source quality
- A1Very likely
On November 10, 2026, Fortinet released a series of security bulletins (FG-IR-26-142 through FG-IR-26-276) addressing a broad collection of vulnerabilities affecting multiple products. These vulnerabilities, which include CVE-2025-61625, CVE-2026-121528, and CVE-2026-121530, pose significant risks including arbitrary code execution, privilege escalation, cross-site scripting (XSS), SQL injection, server-side request forgery (SSRF), and denial-of-service conditions.
Impact
The disclosed vulnerabilities impact the integrity and confidentiality of data within affected Fortinet systems. Attackers may achieve remote code execution or escalate privileges, potentially leading to a full system compromise. The scope covers major enterprise infrastructure components, including firewalls (FortiOS), centralized management platforms (FortiManager), logging solutions (FortiAnalyzer), and sandbox analysis environments.
Recommendation
- Audit all internal and cloud-hosted Fortinet infrastructure against the identified vulnerable versions.
- Upgrade FortiAnalyzer, FortiManager, and FortiOS to the minimum patched versions listed in the vendor advisories immediately.
- Apply available patches for FortiSandbox and FortiPAM as detailed in the respective FG-IR bulletins.
- Review the comprehensive list of Fortinet PSIRT bulletins at https://fortiguard.fortinet.com/psirt/ to ensure specific product-version alignment.
Mitigations
Inventory and patch all affected Fortinet appliances to the versions specified in the relevant FG-IR bulletins.
Multiple CVEs affecting FortiAnalyzer, FortiManager, and FortiOS