{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/fortimanager-cloud-7.6.2-and-7.6.7/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["FortiAnalyzer Cloud (\u003e7.2.1 and \u003c7.2.12, \u003e7.4.1 and \u003c7.4.8, \u003e7.6.2 and \u003c7.6.5)","FortiAnalyzer (\u003c7.4.8, 7.6.x \u003c 7.6.5)","FortiManager (\u003c7.4.7, 7.6.x \u003c 7.6.7, 8.0.x \u003c 8.0.1)","FortiManager Cloud (\u003e7.6.2 and \u003c7.6.7)","FortiOS (8.0.x \u003c 8.0.1, \u003c 7.6.9)","FortiProxy (\u003c 7.6.7)","FortiSandbox Cloud (\u003c 5.0.7, 5.2.x \u003c 5.2.2)","FortiSandbox PaaS (\u003c 5.0.7)","FortiSandbox (\u003c 5.0.7, 5.2.x \u003c 5.2.2)","FortiSwitch (\u003c 7.6.7)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","fortinet","network-security"],"_cs_type":"advisory","_cs_vendors":["Fortinet"],"content_html":"\u003cp\u003eOn October 14, 2026, the French National Cybersecurity Agency (ANSSI) reported multiple critical vulnerabilities affecting a wide range of Fortinet products. These flaws impact various versions of FortiAnalyzer, FortiManager, FortiOS, FortiProxy, FortiSandbox, and FortiSwitch. The vulnerabilities allow remote attackers to execute arbitrary code, perform privilege escalation, bypass security policies, or induce denial-of-service conditions. Organizations utilizing these products should audit their firmware versions immediately and apply the patches referenced in the specific Fortinet security bulletins (FG-IR-26-176 through FG-IR-26-185).\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation of these vulnerabilities could lead to full system compromise, unauthorized access to network configurations, or service outages. Given the ubiquity of Fortinet appliances at network perimeters, unpatched systems are at high risk of exploitation. These flaws affect core security infrastructure used by enterprises and service providers to manage traffic and secure network perimeters.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately audit all FortiAnalyzer, FortiManager, FortiOS, FortiProxy, FortiSandbox, and FortiSwitch deployments against the affected version lists.\u003c/li\u003e\n\u003cli\u003eApply vendor-supplied patches as documented in Fortinet security bulletins FG-IR-26-176, FG-IR-26-177, FG-IR-26-178, FG-IR-26-179, FG-IR-26-181, FG-IR-26-182, and FG-IR-26-185.\u003c/li\u003e\n\u003cli\u003eReview administrative access logs for unusual activity originating from internal or external sources on management interfaces of Fortinet appliances.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-14T16:21:43Z","date_published":"2026-10-14T16:21:43Z","id":"https://feed.craftedsignal.io/briefs/2026-10-fortinet-vulnerabilities/","summary":"Multiple vulnerabilities across several Fortinet products, including FortiOS and FortiManager, permit remote code execution, privilege escalation, and denial-of-service.","title":"Multiple Vulnerabilities in Fortinet Products","url":"https://feed.craftedsignal.io/briefs/2026-10-fortinet-vulnerabilities/"}],"language":"en","title":"CraftedSignal Threat Feed - FortiManager Cloud (\u003e7.6.2 and \u003c7.6.7)","version":"https://jsonfeed.org/version/1.1"}