Node2Shell CVEs
2026-10-28T20:52:16Z•1703a1d549dd7e1b7b2122bfb0aee6f348cfd4ff8346cc6ea5b7f468e8c566ce
CVE-2022-0778CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497FortinetNode.jsOpenSSLPHPPSIRTSQL-injectionXSSaccess-controlarbitrary-file-writeauthentication-bypasscommand-injectiondenial-of-serviceexploited-in-the-wildpath-traversalremote-code-executionvulnerability-advisory
What happened
Fortinet PSIRT advisories describe multiple vulnerabilities across FortiOS, FortiProxy, FortiSIEM, FortiSandbox, FortiManager, FortiAnalyzer, FortiMail, FortiSOAR, FortiPAM, FortiClient, FortiMonitorOnSight, and related products, including unauthenticated authentication bypass, arbitrary file write, remote code execution, command injection, SQL injection, denial of service, access-control flaws, XSS, and information disclosure. The feed also lists high-severity Node.js 26/24/22 vulnerabilities and PHP remote-code-execution issues, including a reportedly exploited-in-the-wild path traversal/NUL
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 1703a1d549dd7e1b7b2122bfb0aee6f348cfd4ff8346cc6ea5b7f468e8c566ce
- Enrichment time
- 2026-10-28T20:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.