Fortinet fixes 43 flaws across management and analytics products
NCSC-NL reported on Nov. 12, 2026, that Fortinet had fixed 43 vulnerabilities across FortiManager, FortiAnalyzer, their cloud versions and related products, including FortiAnalyzer-BigData and FortiSASE-Sovereign.
The flaws include authentication and authorization bypasses, command and SQL injection, and errors in file handling. Depending on the vulnerability, attackers may need an account—or may not need to authenticate—to run commands, alter configurations, or read and change files. The prerequisites and consequences vary across the set.
Because FortiManager centrally manages security infrastructure, a compromise could affect managed devices and disrupt the management and analysis layer, not just one appliance. For organizations using cloud or sovereign variants, the exposure extends to those deployments too; the supplied NCSC-NL summary gives no fixed release versions or evidence of exploitation.
1 source · Nov 12
CVEs in this update
43 CVEs
Across FortiManager, FortiAnalyzer, FortiManager Cloud, and related packages.
Kwetsbaarheden verholpen in Fortinet FortiManager en FortiAnalyzer
Fortinet heeft meerdere kwetsbaarheden verholpen in FortiManager en FortiAnalyzer, inclusief hun cloudversies en aanverwante producten zoals FortiManager Cloud, FortiAnalyzer Cloud, FortiAnalyzer-BigData, FortiSASE-Sovereign en FortiSASE-Sovereign GUI.