Technical Tip: Explanation of 'Branches to fix' version in Fortinet PSIRT Policy
| Description | This article describes the definition of 'Branches to fix' corresponding to the CVSS score. | |||||||||||||||||||||||
| Scope | All FortiOS. | |||||||||||||||||||||||
| Solution | Fortinet PSIRT policy defines the 'Branches to fix' based on the CVSS score assigned to a specific vulnerability. The full PSIRT policy can be found via the following link: PSIRT Policy.
In the PSIRT policy, the branches to fix are highly dependent on the severity of the reported vulnerability:
As of January 2026, the FortiOS releases that have not reached the end of support date are as follows:
Reference: Fortinet Product Life Cycle.
Based on the information above, the categorization of the 'Branches to fix' is as follows:
|
