Get relevant IT updates by email →
FortiGate FortiOS security update — October 2026: Organisations using FortiGate firewalls should prioritise a supported FortiOS upgrade and review administrative access. Fortinet’s 21 October notice lists the following affected ranges and fixed releases, with availability scheduled for 22 October.
Which FortiOS Versions Are Listed?
| Branch | Affected range | Fixed release listed |
|---|---|---|
| 8.0 | 8.0.0–8.0.1 | 8.0.2 or above |
| 7.6 | 7.6.0–7.6.7 | 7.6.8 or above |
| 7.4 | 7.4.0–7.4.12 | 7.4.13 or above |
| 7.2 | 7.2.0–7.2.13 | 7.2.14 or above |
Source: Fortinet’s security-hardening announcement. These are the vendor’s listed fixes, not confirmation of firmware availability or suitability for an individual appliance. An unlisted branch should not be assumed safe.
What Should FortiGate Administrators Prioritise?
Fortinet prioritises internet-facing devices. Its guidance includes configuration backups, monitoring for unusual administrative access or configuration changes, restricting HTTPS/SSH management to trusted addresses and administrator MFA. Temporary exposure reduction does not replace upgrading.
Plan The FortiOS Upgrade Around Your Business
Use Fortinet’s Upgrade Path Tool to establish the tested sequence for the appliance and current version. Have the maintainer check model support, release notes and intermediate upgrade steps before choosing the target firmware.
- Agree the maintenance owner, scope and outage window.
- Keep a recoverable configuration copy and an agreed recovery plan.
- Identify the business connections that need testing, such as internet access, remote working and site-to-site links where used.
- After the change, record the running version, test the agreed services and review unexpected behaviour.
These planning checks are T Strategy’s practical recommendations. The table alone is not a complete change plan, and this article does not assess any customer’s firewall.
Common Questions About This FortiGate FortiOS Security Update
Should Every Firewall Move To The Newest Branch?
Do not select a branch from the table alone. Ask the maintainer to confirm a supported destination and upgrade path for the specific appliance.
Does The Notice Identify Individual CVEs?
The announcement says detailed public advisories are planned for 10 November 2026. Do not infer specific CVEs or confirmed exploitation from this overview.
Discuss Your Firewall Maintenance Requirements
Review the responsibilities and support scope for your environment through T Strategy’s Cyber Security services or IT Managed Services. Contact T Strategy to discuss your FortiGate maintenance priorities.
Stay informed
Get Important IT Updates In Your Inbox
Receive relevant security alerts and a monthly practical digest from T Strategy, with service offers where useful. Choose the topics that matter to your business.
Need Help With An IT Issue Now?
Request assistance separately so our team can discuss your requirements.
Request a service discussion →