Fortinet released 89 new security advisories on Tuesday fixing nearly 100 vulnerabilities across its products. The large batch comes three weeks after the company said it had added frontier AI models to its product security testing to find defects faster. It says it is publishing fixes early to give customers time to update before more technical details come out, "as AI shortens the time between disclosure and exploitation".
About 17 of the flaws are critical, and some allow code execution, authentication bypass, account takeover and command execution as super admin. FortiMail received the largest number of critical fixes, followed by FortiAuthenticator, FortiOS, FortiManager and FortiAnalyzer. Critical issues were also fixed in FortiSASE and FortiClient, and about 80 more flaws were rated high severity.
Fortinet does not say any of the flaws are being exploited. Organizations using Fortinet products, especially FortiMail, FortiOS and FortiClient, should check the company's PSIRT page and install the updates.