https://askthegaffa.com/how-we-check New FortiOS builds, withdrawals, security advisories and support milestones, checked against Fortinet sources. Independent, not affiliated with Fortinet. en-gb Tue, 20 Oct 2026 17:54:39 GMT https://askthegaffa.com/how-we-check gatefirmware-site-2026-10-20-148b958b7a Tue, 20 Oct 2026 09:00:00 GMT FortiOS 8.0 support confirmed for 63 more models from the supported models list in the 8.0.1 release notes, so no model now shows newer branches as not verified. https://askthegaffa.com/how-we-check gatefirmware-site-2026-10-15-b692f5d13f Thu, 15 Oct 2026 09:00:00 GMT Three upgrade notes corrected against Fortinet's release notes: the 8.0.1 VM upgrade step, the 7.4.1 IPS engine version display and the 7.0.8 admin-restrict-local behaviour. https://askthegaffa.com/how-we-check gatefirmware-site-2026-10-13-705342cc96 Tue, 13 Oct 2026 09:00:00 GMT Model, Firmware and Lifecycle pages now lead with the answer. The upgrade planner no longer states an upgrade route, and advisories on branches an advisory doesn't list show as not verified. https://askthegaffa.com/how-we-check gatefirmware-site-2026-10-12-d9f51482e6 Mon, 12 Oct 2026 09:00:00 GMT End of order dates updated from Fortinet's lifecycle export for FortiWiFi-40F, 40F-3G4G, 60F and 80F-2R. https://askthegaffa.com/how-we-check gatefirmware-site-2026-10-08-7c9408dbfc Thu, 08 Oct 2026 09:00:00 GMT Tracker launched, with builds and dates taken from Fortinet sources. https://askthegaffa.com/firmware gatefirmware-eos-7.2 Wed, 30 Sep 2026 09:00:00 GMT No more fixes for FortiOS 7.2, except a model's final firmware, which keeps limited fixes until the hardware's end of support. https://askthegaffa.com/firmware/8.0.1 gatefirmware-build-8.0.1 Tue, 15 Sep 2026 09:00:00 GMT FortiOS 8.0.1 is out. See what it changes, its known issues and the advisories it fixes. https://askthegaffa.com/advisories/fg-ir-26-174 gatefirmware-adv-FG-IR-26-174 Tue, 08 Sep 2026 09:00:00 GMT Unauthenticated attacker can intercept traffic between the agentless ZTNA portal and backend websites. Affected and fixed builds for FortiOS 7.6. https://askthegaffa.com/firmware/7.6.7 gatefirmware-build-7.6.7 Tue, 02 Jun 2026 09:00:00 GMT FortiOS 7.6.7 is out. See what it changes, its known issues and the advisories it fixes. https://askthegaffa.com/advisories/fg-ir-26-123 gatefirmware-adv-FG-IR-26-123 Tue, 12 May 2026 09:00:00 GMT Attacker who controls a connected FortiAP, FortiExtender or FortiSwitch can run code on the FortiGate. Affected and fixed builds for FortiOS 7.6, 7.4, 7.2, 7.0, 6.4, 6.2 and 6.0. https://askthegaffa.com/firmware/7.4.12 gatefirmware-build-7.4.12 Thu, 07 May 2026 09:00:00 GMT FortiOS 7.4.12 is out. See what it changes, its known issues and the advisories it fixes. https://askthegaffa.com/firmware/7.0.18 gatefirmware-wd-7.0.18 Wed, 29 Apr 2026 09:00:00 GMT Removed from the Upgrade Path Tool because of CVE-2026-24858 (FG-IR-26-060). Use 7.0.19 or later instead. https://askthegaffa.com/firmware/7.2.12 gatefirmware-wd-7.2.12 Wed, 29 Apr 2026 09:00:00 GMT Removed from the Upgrade Path Tool because of CVE-2026-24858 (FG-IR-26-060). Use 7.2.13 or later instead. https://askthegaffa.com/firmware/7.4.10 gatefirmware-wd-7.4.10 Wed, 29 Apr 2026 09:00:00 GMT Removed from the Upgrade Path Tool because of CVE-2026-24858 (FG-IR-26-060). Use 7.4.11 or later instead. https://askthegaffa.com/firmware/7.6.5 gatefirmware-wd-7.6.5 Wed, 29 Apr 2026 09:00:00 GMT Removed from the Upgrade Path Tool because of CVE-2026-24858 (FG-IR-26-060). Use 7.6.6 or later instead. https://askthegaffa.com/firmware/8.0.0 gatefirmware-build-8.0.0 Tue, 21 Apr 2026 09:00:00 GMT FortiOS 8.0.0 is out. See what it changes, its known issues and the advisories it fixes. https://askthegaffa.com/advisories/fg-ir-25-1052 gatefirmware-adv-FG-IR-25-1052 Tue, 10 Feb 2026 09:00:00 GMT Unauthenticated attacker can bypass LDAP login for Agentless VPN or FSSO policies when the LDAP server allows unauthenticated bind. Affected and fixed builds for FortiOS 7.6. https://askthegaffa.com/advisories/fg-ir-25-934 gatefirmware-adv-FG-IR-25-934 Tue, 10 Feb 2026 09:00:00 GMT Attacker who already has filesystem access from a prior compromise can read sensitive files via SSL VPN. Known to be exploited. Affected and fixed builds for FortiOS 7.6, 7.4, 7.2, 7.0 and 6.4. https://askthegaffa.com/firmware/7.0.19 gatefirmware-build-7.0.19 Fri, 30 Jan 2026 09:00:00 GMT FortiOS 7.0.19 is out. See what it changes, its known issues and the advisories it fixes. https://askthegaffa.com/firmware/7.2.13 gatefirmware-build-7.2.13 Thu, 29 Jan 2026 09:00:00 GMT FortiOS 7.2.13 is out. See what it changes, its known issues and the advisories it fixes. https://askthegaffa.com/firmware/7.6.6 gatefirmware-build-7.6.6 Wed, 28 Jan 2026 09:00:00 GMT FortiOS 7.6.6 is out. See what it changes, its known issues and the advisories it fixes. https://askthegaffa.com/advisories/fg-ir-26-060 gatefirmware-adv-FG-IR-26-060 Tue, 27 Jan 2026 09:00:00 GMT Attacker with their own FortiCloud account and registered device can log in to other customers' devices with FortiCloud SSO enabled. Known to be exploited. Affected and fixed builds for FortiOS 7.6, 7.4, 7.2 and 7.0. https://askthegaffa.com/firmware/7.4.11 gatefirmware-build-7.4.11 Tue, 27 Jan 2026 09:00:00 GMT FortiOS 7.4.11 is out. See what it changes, its known issues and the advisories it fixes. https://askthegaffa.com/firmware/7.4.10 gatefirmware-build-7.4.10 Mon, 19 Jan 2026 09:00:00 GMT FortiOS 7.4.10 is out. See what it changes, its known issues and the advisories it fixes. https://askthegaffa.com/advisories/fg-ir-25-084 gatefirmware-adv-FG-IR-25-084 Tue, 13 Jan 2026 09:00:00 GMT Unauthenticated remote code execution via crafted requests to the CAPWAP daemon when fabric access is exposed. Known to be exploited. Affected and fixed builds for FortiOS 7.6, 7.4, 7.2, 7.0 and 6.4. https://askthegaffa.com/firmware/7.6.5 gatefirmware-build-7.6.5 Thu, 11 Dec 2025 09:00:00 GMT FortiOS 7.6.5 is out. See what it changes, its known issues and the advisories it fixes. https://askthegaffa.com/advisories/fg-ir-25-647 gatefirmware-adv-FG-IR-25-647 Tue, 09 Dec 2025 09:00:00 GMT Unauthenticated attacker can bypass FortiCloud SSO admin login with a crafted SAML message when the feature is enabled. Known to be exploited. Affected and fixed builds for FortiOS 7.6, 7.4, 7.2 and 7.0. https://askthegaffa.com/firmware/7.0.18 gatefirmware-build-7.0.18 Thu, 06 Nov 2025 09:00:00 GMT FortiOS 7.0.18 is out. See what it changes, its known issues and the advisories it fixes. https://askthegaffa.com/advisories/fg-ir-24-361 gatefirmware-adv-FG-IR-24-361 Tue, 14 Oct 2025 09:00:00 GMT Local authenticated admin can run system commands via crafted CLI input, escaping the restricted shell. Affected and fixed builds for FortiOS 7.6, 7.4, 7.2, 7.0 and 6.4. https://askthegaffa.com/firmware gatefirmware-eos-7.0 Tue, 30 Sep 2025 09:00:00 GMT No more fixes for FortiOS 7.0, except a model's final firmware, which keeps limited fixes until the hardware's end of support. https://askthegaffa.com/firmware/7.4.9 gatefirmware-build-7.4.9 Thu, 25 Sep 2025 09:00:00 GMT FortiOS 7.4.9 is out. See what it changes, its known issues and the advisories it fixes.