Fortinet FortiManager 7.2.0 < 7.2.13 / 7.4.0 < 7.4.12 / 7.6.0 < 7.6.8 / 8.0.0 < 8.0.2 Multiple Vulnerabilities

critical Nessus Plugin ID 370509

Synopsis

Fortinet Firewall is missing one or more security-related updates.

Description

The version of FortiManager installed on the remote host is 7.2.x prior to 7.2.13, 7.4.x prior to 7.4.12, 7.6.x prior to 7.6.8, or 8.0.x prior to 8.0.2. It is, therefore, affected by multiple vulnerabilities as referenced in the Fortinet security hardening release announcement. Fortinet states that the release addresses critical and high severity vulnerabilities identified through its AI-assisted security testing program, and that the associated advisories will be published on November 10, 2026.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Solution

Upgrade to FortiManager version 7.2.13 / 7.4.12 / 7.6.8 / 8.0.2 or later.

See Also

http://www.nessus.org/u?1a01a0e4

Plugin Details

Severity: Critical

ID: 370509

File Name: fortimanager_2026_10_22.nasl

Version: 1.1

Type: Local

Family: Firewalls

Published: 10/22/2026

Updated: 10/22/2026

Supported Sensors: Nessus

Vulnerability Information

CPE: cpe:/a:fortinet:fortimanager

Required KB Items: Host/Fortigate/model, Host/Fortigate/version

Patch Publication Date: 10/22/2026

Vulnerability Publication Date: 10/21/2026