Linux kernel RCE CVE-2026-98432
2026-11-09T08:52:18Z•21b23676602c6ba12af4685de6cccc91adf80265f51b5b7ce6a364de132d1e7a
CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-115560CVE-2026-98432FortiAnalyzerFortiMailFortiManagerFortiOSFortiSIEMFortiSandboxFortinetLinux kernelNode.jsPHPPSIRTSQL injectionXSSaccess controlarbitrary file writeauthentication bypasscommand injectiondenial of serviceexploited in the wildpath traversalremote code executionuse-after-free
What happened
Fortinet PSIRT advisories disclose numerous vulnerabilities across FortiOS, FortiSIEM, FortiSandbox, FortiManager, FortiAnalyzer, FortiMail, FortiPAM, FortiSOAR, FortiClient, FortiMonitorOnSight and related products. Issues include unauthenticated arbitrary file write/path traversal reportedly exploited in the wild, authentication bypasses, remote command execution, SQL and command injection, hard-coded or static cryptographic keys, access-control flaws, denial of service, XSS, and kernel use-after-free. The highest-risk items include CVE-2026-98432 Linux kernel remote code execution, Node.js
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 21b23676602c6ba12af4685de6cccc91adf80265f51b5b7ce6a364de132d1e7a
- Enrichment time
- 2026-11-09T08:52:18Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.