Vulnerability in OpenSSL library
2026-09-05T20:52:17Z•22c42da1a3bcf90310651b2583ed3b5b54e2a01468a47088e0108bac9fa02024
CVE-2022-0778CVE-2026-49975FortiAuthenticatorFortiClientFortiManagerFortiOSFortiPAMFortiPortalFortiProxyFortiSASEFortiSIEMFortiSandboxFortiWebFortinetOpenSSLSSRFWAF-evasionXSSaccess-controlauthentication-bypassbuffer-overflowcommand-injectiondenial-of-serviceinformation-disclosurepath-traversalremote-code-executionvulnerability-advisories
What happened
Fortinet PSIRT feed containing multiple vulnerability advisories across FortiOS, FortiProxy, FortiWeb, FortiSIEM, FortiSandbox, FortiClient, FortiManager, FortiAuthenticator, FortiPortal, FortiPAM, FortiSASE, FortiSwitch Manager, and OpenSSL/Apache components. Issues include authentication bypasses, unauthenticated remote code or command execution, denial of service, buffer overflows and overreads, access-control flaws, information disclosure, SSRF, XSS, path traversal, and WAF evasion. The most severe item is a CVSS 9.1 unauthenticated OS command injection in the FortiSandbox VNC feature; no.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 22c42da1a3bcf90310651b2583ed3b5b54e2a01468a47088e0108bac9fa02024
- Enrichment time
- 2026-09-05T20:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.