[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVgql5TZIWUOdq7eem8wToZ8eiz6wJ7m2JjUdvRKYLgg":3},{"article":4,"iocs":44,"watch_terms":49,"solutions":50,"lesson":133},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"9d24963e-761c-4661-8f2f-a10911584355","Fortinet Patches Nearly 100 Vulnerabilities","fortinet-patches-nearly-100-vulnerabilities-56bcf2","The massive drop comes after the company integrated frontier AI models into its product security testing. The post Fortinet Patches Nearly 100 Vulnerabilities appeared first on SecurityWeek.","Fortinet has released 89 security advisories addressing nearly 100 vulnerabilities, with approximately 17 classified as critical. These critical flaws could allow for arbitrary code execution, authentication bypass, account takeover, and other severe impacts. The company noted that the integration of AI models into its security testing has increased its efficiency in discovering these defects.","Fortinet patched nearly 100 vulnerabilities, including 17 critical flaws, across its product line.","https:\u002F\u002Fwww.securityweek.com\u002Ffortinet-patches-nearly-100-vulnerabilities\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2023\u002F06\u002Ffortinet-e1737023333411.jpg","2026-11-11T12:10:14+00:00","2026-11-11T13:00:18.942452+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"Fortinet","vendor",{"name":21,"type":22},"FortiMail","product",{"name":24,"type":22},"FortiAuthenticator",{"name":26,"type":22},"FortiOS",{"name":28,"type":22},"FortiManager",{"name":30,"type":22},"FortiAnalyzer","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,39],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",[45],{"type":46,"value":47,"context":48},"malware","Fortinet2Shell","Researcher-named flaw in FortiClient exploitable with FortiPAM enabled.",[18,21,24],{"controls":51,"vendors":127},[52,81,106],{"slug":53,"name":54,"problem":55,"products":56},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[57,65,73],{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":82,"name":83,"problem":84,"products":85},"patch-management","Automated patch management","Known holes get closed in days, not months.",[86,90,98],{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":82,"product_name":87,"url":88,"description":89},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"slug":107,"name":108,"problem":109,"products":110},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[111,119],{"vendor_slug":112,"vendor_name":113,"vendor_logo":114,"product_slug":115,"product_name":116,"url":117,"description":118},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":120,"vendor_name":121,"vendor_logo":122,"product_slug":123,"product_name":124,"url":125,"description":126},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",[128],{"slug":129,"name":18,"logo_path":130,"roles":131},"fortinet","\u002Fvendor-logos\u002Ffortinet.png",[132],"affected",{"slug":134,"title":135,"body":136,"framework_refs":137,"framework_notes":143},"fortinet-releases-near-100-vulnerability-patches-including-17-critical-flaws","Fortinet Releases Near-100 Vulnerability Patches, Including 17 Critical Flaws","Fortinet disclosed approximately 100 vulnerabilities across its product line, with around 17 classified as critical — capable of enabling arbitrary code execution, authentication bypass, and account takeover. Organizations running unpatched Fortinet appliances are exposed to severe risk, as network security devices are high-value targets that sit at the perimeter of enterprise environments. The scale of this release underscores how even trusted security vendors can carry significant vulnerability debt. Prompt patching is essential because threat actors routinely weaponize Fortinet vulnerabilities within days of public disclosure, as seen in past Fortinet CVE exploits.",[138,139,140,141,142],"CIS Control 7: Continuous Vulnerability Management (v8)","CIS Control 2: Inventory and Control of Software Assets (v8)","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 ID.RA-1: Asset Vulnerabilities Identified and Documented","NIS2 Article 21(2)(e)",{"NIS2 Article 21(2)(e)":144,"NIST SP 800-53 SI-2: Flaw Remediation":145,"CIS Control 7: Continuous Vulnerability Management (v8)":146,"CIS Control 2: Inventory and Control of Software Assets (v8)":147,"NIST CSF 2.0 ID.RA-1: Asset Vulnerabilities Identified and Documented":148},"NIS2 Article 21(2)(e) mandates security in acquisition, development, and maintenance including vulnerability handling, requiring operators of essential services to have processes in place to respond to exactly this type of large-scale vendor vulnerability disclosure.","SI-2 requires organizations to identify, report, and correct information system flaws — a process that must be executed promptly given the critical severity of several vulnerabilities in this Fortinet release.","CIS Control 7 requires organizations to continuously assess and remediate vulnerabilities — directly applicable here, where ~100 vulnerabilities in a widely deployed security platform demand a disciplined, timely patching process.","Knowing exactly which Fortinet product versions are deployed across the environment is a prerequisite to assessing exposure and prioritizing remediation from this advisory batch.","This category requires that vulnerabilities in organizational assets be identified and documented, which is the foundational step needed to triage and prioritize patching across nearly 100 newly disclosed Fortinet flaws."]