Fortinet products face critical security vulnerabilities

INCIBE-CERT has issued an early warning regarding critical security updates required for several Fortinet product families. The alert, identified as INCIBE-2026-779, affects FortiOS, FortiManager, FortiAnalyzer, FortiMail, and FortiAuthenticator. The vulnerabilities are classified with a severity level of 5, categorized as critical.

Fortinet has announced corrections for these vulnerabilities, which were identified through AI-assisted testing. While specific CVE identifiers and CVSS scores have not yet been made public, the organization emphasizes that devices directly exposed to the internet should be the highest priority for patching. For FortiOS, specifically, users are urged to update to versions 8.0.2, 7.6.8, 7.4.13, or 7.2.14, or any subsequent version within those branches.

In a broader cybersecurity context, recent advancements in artificial intelligence have accelerated the discovery of vulnerabilities in widely used technologies, such as the PHP programming language. This has led to coordinated global responses, including initiatives like OpenAI’s ‘Patch the Planet,’ to secure systems across various governments and infrastructures.