Node2Shell CVEs
2026-11-01T08:52:18Z•0e50ceb43f0e94f409bee04cd65ac95323a6050c3affac6757217fb4a908053d
CVE-2022-0778CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497CWE-22CWE-284CWE-78CWE-89FortinetJWTNode.jsOpenSSLPHPPSIRTSQL-injectionaccess-controlactively-exploitedarbitrary-file-writeauthentication-bypasscommand-injectioncross-site-scriptingdenial-of-servicepath-traversalremote-code-executionstatic-cryptographic-keyvulnerability
What happened
Fortinet PSIRT feed aggregating numerous vulnerabilities across Fortinet products and related Node.js/PHP components. Issues include unauthenticated authentication bypass, arbitrary file write and command execution, remote code execution, SQL and command injection, path traversal, static-key JWT forgery, denial of service, access-control flaws, and an actively exploited path traversal vulnerability. The highest-impact entries have CVSS scores up to 9.9, including vulnerabilities affecting FortiSandbox, FortiMonitorOnSight, FortiSIEM, FortiOS/FortiProxy, FortiManager, FortiMail, Node.js, andPHP
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 0e50ceb43f0e94f409bee04cd65ac95323a6050c3affac6757217fb4a908053d
- Enrichment time
- 2026-11-01T08:52:18Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.