Vulnerability in OpenSSL library
2026-09-04T20:52:17Z•0af24435aa1429a66e06de76fcf7d33bc176e0cb6c03d13692e7766659eea72b
CVE-2022-0778CVE-2026-49975Apache HTTP ServerFortiAuthenticatorFortiClientFortiManagerFortiOSFortiPAMFortiProxyFortiSIEMFortiSandboxFortiWebFortinetOpenSSLPSIRTSSRFWAF-evasionXSSaccess-controlauthentication-bypassbuffer-overflowcommand-injectiondenial-of-serviceinformation-disclosurepath-traversalremote-code-executionvulnerability-advisory
What happened
Fortinet PSIRT feed containing multiple vulnerability advisories across FortiOS, FortiProxy, FortiWeb, FortiSandbox, FortiSIEM, FortiClient, FortiManager, FortiAuthenticator, FortiPortal and related products. Issues include authentication bypass, unauthenticated command execution, arbitrary code execution, denial of service, information disclosure, access-control flaws, buffer overflows, SSRF, XSS, path traversal and WAF bypass. The highest-risk item is an unauthenticated OS command injection in FortiSandbox products with CVSS 9.1; other notable issues include FortiWeb administrative login via
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 0af24435aa1429a66e06de76fcf7d33bc176e0cb6c03d13692e7766659eea72b
- Enrichment time
- 2026-09-04T20:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.