Fortinet’s massive patch release has dropped 89 new security advisories, addressing nearly 100 vulnerabilities across its product line. This wave of patches comes just three weeks after Fortinet announced its integration of frontier AI models into its product security testing, which can more efficiently identify security defects.
The sheer scale of this patch release is staggering, with approximately 17 critical-severity issues identified. These bugs could be exploited for arbitrary code execution and other severe consequences such as authentication bypass, account takeover, and access to secure email accounts. FortiMail has received the largest batch of critical fixes, followed closely by FortiAuthenticator, FortiOS, FortiManager, and FortiAnalyzer.
A notable example is the vulnerability in FortiClient, which can be exploited if FortiPAM is enabled. According to Baldur Security principal security consultant Kevin Joensen, an attacker could execute arbitrary code simply by tricking a victim into visiting a malicious website. This vulnerability has been dubbed “Fortinet2Shell” due to its root cause: a misconfigured CORS setting that allows attackers to communicate with local services and execute code reliably.
The patch release also addresses nearly 80 high-severity vulnerabilities, many of which could be used for cross-site scripting (XSS) attacks or privilege escalation. These defects include code execution, command injection, arbitrary file uploads, denial-of-service conditions, and other unauthorized actions. While Fortinet makes no mention of these flaws being exploited in the wild, it’s essential to note that even unexploited vulnerabilities can be used as stepping stones for more severe attacks.
The integration of AI into Fortinet’s security testing is a significant development, allowing the company to identify security defects more efficiently. As Fortinet notes, this approach gives customers valuable time to prioritize upgrades before additional technical details become public. This is especially crucial in today’s fast-paced threat landscape, where attackers can quickly exploit newly disclosed vulnerabilities.
For users of Fortinet products, it’s essential to apply these patches as soon as possible to minimize the risk of exploitation. While Fortinet has provided detailed information on the affected products and vulnerabilities, it’s recommended that administrators review each advisory carefully to understand the potential risks and required actions.
Source: SecurityWeek — 2026-11-11