Fortinet security advisory (AV26-023) - Update 1
Cybersecurity Classified by Officially
Serial number: AV26-023
Date: January 13, 2026
Updated: September 9, 2026
On January 13, 2026, Fortinet published security advisories to address vulnerabilities in multiple products. Included were critical updates for the following:
- FortiFone 7.0 – versions 7.0.0 to 7.0.1
- FortiFone 3.0 – versions 3.0.13 to 3.0.23
- FortiOS 7.6 – versions 7.6.0 to 7.6.3
- FortiOS 7.4 – versions 7.4.0 to 7.4.8
- FortiOS 7.2 – versions 7.2.0 to 7.2.11
- FortiOS 7.0 – versions 7.0.0 to 7.0.17
- FortiOS 6.4 – versions 6.4.0 to 6.4.16
- FortiSASE 25.2 – version 25.2.b
- FortiSASE 25.1.a – version 25.1.a.2
- FortiSIEM 7.4 – version 7.4.0
- FortiSIEM 7.3 – versions 7.3.0 to 7.3.4
- FortiSIEM 7.2 – versions 7.2.0 to 7.2.6
- FortiSIEM 7.1 – versions 7.1.0 to 7.1.8
- FortiSIEM 7.0 – versions 7.0.0 to 7.0.4
- FortiSIEM 6.7 – versions 6.7.0 to 6.7.10
- FortiSwitchManager 7.2 – versions 7.2.0 to 7.2.6
- FortiSwitchManager 7.0 – versions 7.0.0 to 7.0.5
Update 1
On September 9, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-25249 to their Known Exploited Vulnerabilities (KEV) Database.
The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.
This is an extract. The publication continues at the source.
Read the original at the source: https://cyber.gc.ca/en/alerts-advisories/fortinet-security-advisory-av26-023
Officially imported this from Canadian Centre for Cyber Security’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.
Provenance
- Organization
- Canadian Centre for Cyber Security — imported from official source
- Official source
- https://www.cyber.gc.ca/api/cccs/rss/v1/get?feed=alerts_advisories&lang=en ATOM
- Imported
- September 20, 2026 19:55
- Versions
- 1 recorded
- Identity
https://cyber.gc.ca/en/alerts-advisories/fortinet-security-advisory-av26-023