Piling on....Fortinet wants you to update on 10/22 and don't ask questions. Either patch products exposed to the internet, or take them offline.
Smells like a shell vuln or RCE: "Watch logs for unusual administrative access or unapproved configuration changes before and after patching"
Got a rep on the phone. What time, exactly is October 22 to you? Is it in 30 minutes? 7am Eastern? Other random time?
Well, we just know the recommended patch window for customers is between 10/22 - 10/23. Not exactly what time the patch will be released. You should open a ticket with TAC and ask them.
