Improper limitation of a pathname to a restricted directory
2026-10-11T08:52:16Z•22c38bca841586c9bb4d2e14433b83995c8dca60f016ad92522f5bfe0a78f590
CVE-2022-0778CVE-2026-49975Apache HTTP ServerFortiClientFortiManagerFortiOSFortiPAMFortiProxyFortiSIEMFortiSOARFortiSandboxFortiWebFortinetOpenSSLPSIRTarbitrary-file-writeauthentication-bypassbuffer-overflowcertificate-validationcommand-injectiondenial-of-serviceexploited-in-the-wildimproper-access-controlpath-traversalvulnerabilities
What happened
Fortinet PSIRT advisories covering multiple vulnerabilities across FortiOS, FortiProxy, FortiClient, FortiManager, FortiSandbox, FortiSIEM, FortiWeb, FortiSOAR, FortiPAM, FortiMonitorOnSight, FortiAnalyzer, and related components. Issues range from low-severity denial of service, XSS, SSRF, open redirect, and access-control flaws to critical unauthenticated path traversal and arbitrary file write vulnerabilities. The path traversal issue (CVSS 9.8) is reported as exploited in the wild and requires urgent remediation. Other high-impact findings include authentication bypasses, arbitrary code-ex
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 22c38bca841586c9bb4d2e14433b83995c8dca60f016ad92522f5bfe0a78f590
- Enrichment time
- 2026-10-11T08:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.