Fortinet FortiGuard PSIRT advisories

fortinet-psirt · A · active

https://www.fortiguard.com/psirt

vulnsvendor-psirtlang: enfetch failures: 0quiet periods: 0last fetch: never

Added 2026-09-29: first-party PSIRT for FortiOS / FortiProxy / FortiWeb / FortiManager and the rest of the Fortinet estate, the most frequently KEV-listed edge vendor; only the FortiGuard research blog existed as a source before. RECIPE: `feed https://filestore.fortinet.com/fortiguard/rss/ir.xml 20` (direct; FG-IR-26-164/165/167 dated 2026-09-08 at probe), then `extract https://www.fortiguard.com/psirt/FG-IR-YY-NNN` for the version table and the 'exploited in the wild' statement. (2026-09-29 operator-directed setup review)

Cited in 1 entry

Citation cadence

Citation days per ISO week (1 weeks of coverage span, total 1).

CVE-2026-26035, FortiWeb: one non-default RADIUS admin setting turns any username and password into a valid GUI/CLI login, alongside an FGFM impersonation bug and a FortiClient flaw reachable by anyone who can answer a laptop's DNS2026-08-15