Vulnerability in OpenSSL library
2026-09-07T20:52:17Z•1d1297c7bf181bfc9ad3437a724883a2f7ee6b134f69436a6bee4e522fe701d3
CVE-2022-0778CVE-2026-49975Apache HTTP ServerFortiAuthenticatorFortiClientFortiManagerFortiOSFortiPAMFortiProxyFortiSIEMFortiSandboxFortiSwitch-ManagerFortiWebFortinetOpenSSLPSIRTSSRFWAF-evasionXSSaccess-controlauthentication-bypassbuffer-overflowcommand-injectiondenial-of-serviceinformation-disclosureremote-code-executionvulnerability-advisories
What happened
Fortinet PSIRT feed containing multiple vulnerability advisories across FortiOS, FortiProxy, FortiWeb, FortiSandbox, FortiSIEM, FortiClient, FortiManager, FortiAuthenticator and related products. Issues include authentication bypass, remote code execution, command injection, buffer overflows, information disclosure, denial of service, SSRF, XSS, access-control weaknesses and WAF evasion. The highest-severity item is an unauthenticated second-order OS command injection in FortiSandbox products with CVSS 9.1. The feed also references OpenSSL CVE-2022-0778 and Apache HTTP Server CVE-2026-49975.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 1d1297c7bf181bfc9ad3437a724883a2f7ee6b134f69436a6bee4e522fe701d3
- Enrichment time
- 2026-09-07T20:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.