Is the FortiGateRugged 90D end of life?

Yes. The Fortinet FortiGateRugged 90D has reached end of life. Vendor support ended on 2026-07-15.

When is the FortiGateRugged 90D end of sale date?

The Fortinet FortiGateRugged 90D reached end of sale on 2021-07-15. The last date of vendor support is 2026-07-15.

When does Fortinet support end for the FortiGateRugged 90D?

Fortinet support for the FortiGateRugged 90D ended on 2026-07-15.

Home/Fortinet/FortiGate/FortiGateRugged 90D

FortiGateRugged 90D

SKU FortiGateRugged-90D

Fortinet Chassis · FortiGate Series

High confidence Official Fortinet notice ↗ Verified 2026-07-26

FortiGateRugged 90D is dead. Fortinet support ended 2026-07-15 (-13d). Last available for order 2021-07-15.

Is the FortiGateRugged 90D still supported?

No. Fortinet ended support for the FortiGateRugged 90D on 2026-07-15. No further security fixes will be issued. See Fortinet's lifecycle bulletin.

When does the FortiGateRugged 90D reach end of support?

Fortinet support for the FortiGateRugged 90D ends on 2026-07-15.

What replaces the FortiGateRugged 90D?

Fortinet has not published a successor model for the FortiGateRugged 90D.

What known-exploited CVEs apply to the FortiGateRugged 90D past end of support?

19 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform the FortiGateRugged 90D runs. These will not be patched on this device because it is past the Fortinet security-support date. See the Known Exploited Vulnerabilities table below for the full list.

Known Exploited Vulnerabilities

This device is past Fortinet's security-support date. 19 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform it runs. Fortinet is not issuing patches for this model. Isolate, compensate, or refresh.

CVE	KEV added	Vulnerability	Flags
`CVE-2025-68686`	2026-07-27	Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Advisory 1 Advisory 2 Advisory 3
`CVE-2026-24858`	2026-01-27	Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Advisory 1 Advisory 2 Advisory 3
`CVE-2025-59718`	2025-12-16	Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability Advisory 1 Advisory 2 Advisory 3
`CVE-2019-6693`	2025-06-25	Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability Advisory 1 Advisory 2	Ransomware
`CVE-2025-24472`	2025-03-18	Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Advisory 1 Advisory 2	Ransomware
`CVE-2024-55591`	2025-01-14	Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Advisory 1 Advisory 2	Ransomware
`CVE-2024-23113`	2024-10-09	Fortinet Multiple Products Format String Vulnerability Advisory 1 Advisory 2
`CVE-2024-21762`	2024-02-09	Fortinet FortiOS Out-of-Bound Write Vulnerability Advisory 1 Advisory 2	Ransomware
`CVE-2023-27997`	2023-06-13	Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability Advisory 1 Advisory 2	Ransomware
`CVE-2022-41328`	2023-03-14	Fortinet FortiOS Path Traversal Vulnerability Advisory 1 Advisory 2
`CVE-2022-42475`	2022-12-13	Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability Advisory 1 Advisory 2	Ransomware
`CVE-2022-40684`	2022-10-11	Fortinet Multiple Products Authentication Bypass Vulnerability Advisory 1 Advisory 2	Ransomware
`CVE-2018-13374`	2022-09-08	Fortinet FortiOS and FortiADC Improper Access Control Vulnerability Advisory 1 Advisory 2	Ransomware
`CVE-2018-13382`	2022-01-10	Fortinet FortiOS and FortiProxy Improper Authorization Advisory 1	Ransomware
`CVE-2018-13383`	2022-01-10	Fortinet FortiOS and FortiProxy Out-of-bounds Write Advisory 1	Ransomware
`CVE-2021-44168`	2021-12-10	Fortinet FortiOS Arbitrary File Download Advisory 1
`CVE-2019-5591`	2021-11-03	Fortinet FortiOS Default Configuration Vulnerability Advisory 1
`CVE-2020-12812`	2021-11-03	Fortinet FortiOS SSL VPN Improper Authentication Vulnerability Advisory 1	Ransomware
`CVE-2018-13379`	2021-11-03	Fortinet FortiOS SSL VPN Path Traversal Vulnerability Advisory 1	Ransomware

Source: CISA Known Exploited Vulnerabilities catalog. The Ransomware flag reflects CISA's own knownRansomwareCampaignUse field, set when the CVE has been observed in ransomware campaigns per their threat intel. It's not a property of the vulnerability description itself.

Correlation is at the platform level, not per-OS-version. Not exhaustive: KEV only lists actively-exploited CVEs and many relevant unexploited vulnerabilities are not here. Verify against vendor security advisories (PSIRT, JSA, PAN-SA) and NVD before acting. See compensating controls if refresh isn't immediate.

End of Sale 2021-07-15

End of Support 2026-07-15