After the mid-Oct Fortinet advisory wave: why SIEM queues get louder
· 6 min read
Around mid-October 2026, Fortinet PSIRT published a cluster of product security advisories across FortiOS, FortiSIEM, FortiSandbox, FortiManager, FortiAnalyzer, FortiMail, and related products. One widely noted item in that wave was FG-IR-26-181 / CVE-2026-106174: an improper locking issue in FortiOS that can let an unauthenticated network attacker deny service to the HTTPS management GUI on affected 8.0.0 and 7.6.4–7.6.6 builds.
For security teams that already run a SIEM, the interesting part is not any single CVE. It is what happens to the queue when a major vendor drops a dense advisory set in a short window.