Linux kernel RCE CVE-2026-98432
2026-11-07T08:52:16Z•0ad7173409fbd84484dd000984441cbf6cbbf7b67ab38b249d83a558a6a89930
CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-115560CVE-2026-98432CWE-22CWE-78CWE-89FortiAnalyzerFortiClientFortiMailFortiManagerFortiMonitorFortiOSFortiPAMFortiSIEMFortiSOARFortiSandboxFortinetLinux kernelNode.jsPHPSQL injectionarbitrary file writeauthentication bypasscommand injectiondenial of servicepath traversalremote code executionuse-after-free
What happened
Fortinet PSIRT feed containing multiple 2026 vulnerabilities across Fortinet products and related Linux, Node.js, and PHP components. The highest-risk issues include unauthenticated arbitrary file write/path traversal reportedly exploited in the wild, Linux kernel use-after-free potentially enabling remote code execution, Node.js RCE vulnerabilities, authentication bypasses, SQL/OS command injection, and sensitive-information disclosure. Immediate prioritization should be given to exploited vulnerabilities and unauthenticated remote code execution or authentication bypass flaws.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 0ad7173409fbd84484dd000984441cbf6cbbf7b67ab38b249d83a558a6a89930
- Enrichment time
- 2026-11-07T08:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.