Linux kernel RCE CVE-2026-98432
2026-11-03T08:52:18Z•066e00c7ad813ea5a1964002dbfa2630572ae8036cb08ee2dce42c881b2daed9
CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-98432FortinetLinux kernelNode.jsPHPSQL injectionaccess controlarbitrary file writeauthentication bypasscommand injectioncross-site scriptingdenial of serviceexploited in the wildpath traversalremote code executionsecurity advisories
What happened
Fortinet security advisories covering multiple critical and high-severity vulnerabilities, including Linux kernel TCP IPv4 use-after-free leading to remote code execution (CVE-2026-98432), Node.js and PHP remote code execution flaws, Fortinet product authentication bypasses, arbitrary file write and command execution, SQL injection, path traversal, and denial-of-service issues. One path traversal/NULL-byte flaw is reported as exploited in the wild. The collection includes advisories affecting FortiOS, FortiManager, FortiAnalyzer, FortiSandbox, FortiSIEM, FortiMail, FortiClient, FortiSOAR, Fort
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 066e00c7ad813ea5a1964002dbfa2630572ae8036cb08ee2dce42c881b2daed9
- Enrichment time
- 2026-11-03T08:52:18Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.