{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "FortiOS ist ein gehärtetes Betriebssystem für FortiGate Plattformen.\r\nFortiManager Security Management Appliances ermöglicht die Verwaltung von Fortinet Network Security Geräten.\r\nFortiAnalyzer ist eine Plattform zur Protokollverwaltung, Analyse und Berichterstellung.\r\nFortiMail ist eine Aplliance zum Schutz gegen die von E-Mails übertragenen Bedrohungen.\r\nFortiAuthenticator erweitert die Fähigkeit zur Multi-Faktor-Authentifizierung auf mehrere FortiGate Appliances und auf Lösungen von Drittanbietern, die RADIUS oder LDAP unterstützen.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiOS, FortiManager, FortiAnalyzer, FortiMail und FortiAuthenticator ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Sonstiges",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-4133 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4133.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-4133 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4133"
    }, {
      "category" : "external",
      "summary" : "Fortinet Security Hardening Release vom 2026-10-22",
      "url" : "https://www.fortinet.com/blog/ciso-collective/fortinet-releases-security-hardening-release-for-multiple-products"
    }, {
      "category" : "external",
      "summary" : "HKCERT Security Bulletin",
      "url" : "https://www.hkcert.org/security-bulletin/fortinet-products-multiple-vulnerabilities_20261023"
    } ],
    "source_lang" : "en-US",
    "title" : "Fortinet FortiOS, FortiManager, FortiAnalyzer, FortiMail und FortiAuthenticator: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff",
    "tracking" : {
      "current_release_date" : "2026-10-22T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-10-23T10:45:59.336+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-4133",
      "initial_release_date" : "2026-10-22T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-10-22T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      } ],
      "status" : "final",
      "version" : "1"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<8.0.2",
          "product" : {
            "name" : "Fortinet FortiAnalyzer <8.0.2",
            "product_id" : "T061756"
          }
        }, {
          "category" : "product_version",
          "name" : "8.0.2",
          "product" : {
            "name" : "Fortinet FortiAnalyzer 8.0.2",
            "product_id" : "T061756-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:fortinet:fortianalyzer:8.0.2"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<7.6.8",
          "product" : {
            "name" : "Fortinet FortiAnalyzer <7.6.8",
            "product_id" : "T061757"
          }
        }, {
          "category" : "product_version",
          "name" : "7.6.8",
          "product" : {
            "name" : "Fortinet FortiAnalyzer 7.6.8",
            "product_id" : "T061757-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:fortinet:fortianalyzer:7.6.8"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<7.4.12",
          "product" : {
            "name" : "Fortinet FortiAnalyzer <7.4.12",
            "product_id" : "T061758"
          }
        }, {
          "category" : "product_version",
          "name" : "7.4.12",
          "product" : {
            "name" : "Fortinet FortiAnalyzer 7.4.12",
            "product_id" : "T061758-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:fortinet:fortianalyzer:7.4.12"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<7.2.13",
          "product" : {
            "name" : "Fortinet FortiAnalyzer <7.2.13",
            "product_id" : "T061759"
          }
        }, {
          "category" : "product_version",
          "name" : "7.2.13",
          "product" : {
            "name" : "Fortinet FortiAnalyzer 7.2.13",
            "product_id" : "T061759-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:fortinet:fortianalyzer:7.2.13"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "FortiAnalyzer"
      }, {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<8.0.4",
          "product" : {
            "name" : "Fortinet FortiAuthenticator <8.0.4",
            "product_id" : "T061764"
          }
        }, {
          "category" : "product_version",
          "name" : "8.0.4",
          "product" : {
            "name" : "Fortinet FortiAuthenticator 8.0.4",
            "product_id" : "T061764-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:fortinet:fortiauthenticator:8.0.4"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<6.6.11",
          "product" : {
            "name" : "Fortinet FortiAuthenticator <6.6.11",
            "product_id" : "T061765"
          }
        }, {
          "category" : "product_version",
          "name" : "6.6.11",
          "product" : {
            "name" : "Fortinet FortiAuthenticator 6.6.11",
            "product_id" : "T061765-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:fortinet:fortiauthenticator:6.6.11"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "FortiAuthenticator"
      }, {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<8.0.2",
          "product" : {
            "name" : "Fortinet FortiMail <8.0.2",
            "product_id" : "T061760"
          }
        }, {
          "category" : "product_version",
          "name" : "8.0.2",
          "product" : {
            "name" : "Fortinet FortiMail 8.0.2",
            "product_id" : "T061760-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:fortinet:fortimail:8.0.2"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<7.6.7",
          "product" : {
            "name" : "Fortinet FortiMail <7.6.7",
            "product_id" : "T061761"
          }
        }, {
          "category" : "product_version",
          "name" : "7.6.7",
          "product" : {
            "name" : "Fortinet FortiMail 7.6.7",
            "product_id" : "T061761-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:fortinet:fortimail:7.6.7"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<7.4.9",
          "product" : {
            "name" : "Fortinet FortiMail <7.4.9",
            "product_id" : "T061762"
          }
        }, {
          "category" : "product_version",
          "name" : "7.4.9",
          "product" : {
            "name" : "Fortinet FortiMail 7.4.9",
            "product_id" : "T061762-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:fortinet:fortimail:7.4.9"
            }
          }
        }, {
          "category" : "product_version",
          "name" : "7.2",
          "product" : {
            "name" : "Fortinet FortiMail 7.2",
            "product_id" : "T061763",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:fortinet:fortimail:7.2"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "FortiMail"
      }, {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<8.0.2",
          "product" : {
            "name" : "Fortinet FortiManager <8.0.2",
            "product_id" : "T061752"
          }
        }, {
          "category" : "product_version",
          "name" : "8.0.2",
          "product" : {
            "name" : "Fortinet FortiManager 8.0.2",
            "product_id" : "T061752-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:fortinet:fortimanager:8.0.2"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<7.6.8",
          "product" : {
            "name" : "Fortinet FortiManager <7.6.8",
            "product_id" : "T061753"
          }
        }, {
          "category" : "product_version",
          "name" : "7.6.8",
          "product" : {
            "name" : "Fortinet FortiManager 7.6.8",
            "product_id" : "T061753-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:fortinet:fortimanager:7.6.8"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<7.4.12",
          "product" : {
            "name" : "Fortinet FortiManager <7.4.12",
            "product_id" : "T061754"
          }
        }, {
          "category" : "product_version",
          "name" : "7.4.12",
          "product" : {
            "name" : "Fortinet FortiManager 7.4.12",
            "product_id" : "T061754-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:fortinet:fortimanager:7.4.12"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<7.2.13",
          "product" : {
            "name" : "Fortinet FortiManager <7.2.13",
            "product_id" : "T061755"
          }
        }, {
          "category" : "product_version",
          "name" : "7.2.13",
          "product" : {
            "name" : "Fortinet FortiManager 7.2.13",
            "product_id" : "T061755-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:fortinet:fortimanager:7.2.13"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "FortiManager"
      }, {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<8.0.2",
          "product" : {
            "name" : "Fortinet FortiOS <8.0.2",
            "product_id" : "T061748"
          }
        }, {
          "category" : "product_version",
          "name" : "8.0.2",
          "product" : {
            "name" : "Fortinet FortiOS 8.0.2",
            "product_id" : "T061748-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/o:fortinet:fortios:8.0.2"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<7.6.8",
          "product" : {
            "name" : "Fortinet FortiOS <7.6.8",
            "product_id" : "T061749"
          }
        }, {
          "category" : "product_version",
          "name" : "7.6.8",
          "product" : {
            "name" : "Fortinet FortiOS 7.6.8",
            "product_id" : "T061749-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/o:fortinet:fortios:7.6.8"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<7.4.13",
          "product" : {
            "name" : "Fortinet FortiOS <7.4.13",
            "product_id" : "T061750"
          }
        }, {
          "category" : "product_version",
          "name" : "7.4.13",
          "product" : {
            "name" : "Fortinet FortiOS 7.4.13",
            "product_id" : "T061750-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/o:fortinet:fortios:7.4.13"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<7.2.14",
          "product" : {
            "name" : "Fortinet FortiOS <7.2.14",
            "product_id" : "T061751"
          }
        }, {
          "category" : "product_version",
          "name" : "7.2.14",
          "product" : {
            "name" : "Fortinet FortiOS 7.2.14",
            "product_id" : "T061751-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/o:fortinet:fortios:7.2.14"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "FortiOS"
      } ],
      "category" : "vendor",
      "name" : "Fortinet"
    } ]
  },
  "vulnerabilities" : [ {
    "product_status" : {
      "known_affected" : [ "T061748", "T061759", "T061749", "T061755", "T061756", "T061757", "T061758", "T061751", "T061762", "T061763", "T061752", "T061753", "T061764", "T061754", "T061765", "T061760", "T061750", "T061761" ]
    },
    "release_date" : "2026-10-22T22:00:00.000+00:00"
  } ]
}