Node2Shell CVEs
2026-11-04T08:52:16Z•0431c056c1a094454f634d47f3afe34788a897bbc36fc8b7a3237a478b571165
CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-98432FortiAnalyzerFortiMailFortiManagerFortiMonitorOnSightFortiOSFortiPAMFortiSIEMFortiSandboxFortinetLinux kernelNode.jsPHPPSIRTSQL-injectionaccess-controlarbitrary-file-writeauthentication-bypasscommand-injectioncross-site-scriptingdenial-of-serviceexploited-in-the-wildpath-traversalremote-code-execution
What happened
Fortinet PSIRT feed containing multiple vulnerabilities across Node.js, Linux kernel, PHP, and Fortinet products. Several issues are critical/high severity, including remote code execution, unauthenticated authentication bypass, arbitrary file write, path traversal reportedly exploited in the wild, static-key JWT forgery, and sensitive-information exposure. The feed includes CVE identifiers for Node.js, PHP, and Linux kernel issues; most Fortinet advisories do not expose CVE identifiers in the supplied content.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 0431c056c1a094454f634d47f3afe34788a897bbc36fc8b7a3237a478b571165
- Enrichment time
- 2026-11-04T08:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.