Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Fortinet FortiOS follow-on patch release for authentication bypass

Security Patch Release
First reported
Last updated
Happening score
H score 42
2 unique sources, 2 articles

Summary

Hide ▲

Fortinet is preparing FortiOS 7.4.11, 7.6.6, and 8.0.0 to fully close an authentication bypass flaw affecting FortiOS/FortiGate deployments. The follow-on release matters because earlier updates were reported to have left the issue only partially fixed. The planned fixes are expected over the coming days.

Related Happenings

Progress Software ShareFile Storage Zone Controller path traversal patch release

Security Patch Release
H score38 First: 14.07.2026 19:08 Last: 14.07.2026 19:08 Sources 1

About this happening: Progress Software released 5.12.5 and 6.0.2 for ShareFile Storage Zone Controller after a high-severity zero-day path traversal vulnerability forced last week’s sh...

Open Happening

Fortinet and Ivanti multi-product security patch release

Security Patch Release
H score47 First: 10.06.2026 11:50 Last: 10.06.2026 11:50 Sources 1

About this happening: Fortinet and Ivanti released patches on Tuesday for multiple product flaws, including critical OS command injection and authentication-bypass bugs that could e...

Latest development: 11.06.2026 09:20

Attackers are targeting Ivanti Sentry instances with CVE-2026-10520 exploitation attempts after Ivanti patched the maximum-severity OS command injection flaw in R10.5.2, R10.6.2, and R10.7.1. Shadowserver reported 19 vulnerable instances in its scans and at least 2 backdoored gateways, warning that unpatched Internet-exposed secure mobile gateways are likely compromised.

Open Happening

Fortinet security patch release for CVE-2026-44277

Security Patch Release
H score39 First: 12.05.2026 21:23 Last: 12.05.2026 21:23 Sources 1

About this happening: Fortinet released security updates for FortiSandbox and FortiAuthenticator to fix two critical vulnerabilities that could let an unauthenticated attacker execu...

Open Happening

SAP security patch release for CVE-2019-17571

Security Patch Release
H score42 First: 11.03.2026 14:26 Last: 11.03.2026 14:26 Sources 1

About this happening: SAP released security updates for two critical flaws in FS-QUO and NetWeaver Enterprise Portal Administration, reducing the risk of arbitrary code execution on...

Open Happening

Fortinet FortiClientEMS security update for CVE-2026-21643

Security Patch Release
H score54 First: 10.02.2026 06:38 Last: 10.02.2026 06:38 Sources 1

About this happening: Fortinet released security updates for FortiClientEMS to fix CVE-2026-21643, a critical SQL injection flaw that could let an unauthenticated attacker execute a...

Open Happening

Timeline

  1. 21.01.2026 19:49 3 articles · 5mo ago

    Fortinet plans follow-on FortiOS fixes for CVE-2025-59718

    Mitigation Patch Update

    Fortinet is reportedly preparing FortiOS 7.4.11, 7.6.6, and 8.0.0 over the coming days to fully patch CVE-2025-59718 after earlier FortiOS 7.4.9 and 7.4.10 updates were said to leave the authentication bypass incomplete. FortiGate admins running 7.4.9/7.4.10 reported malicious SSO logins that created local admin access, reinforcing the need for the follow-on release.

    Show sources
    Open in new tab