Linux kernel RCE CVE-2026-98432
2026-11-07T20:52:17Z•33de5f64dc2f09f2f7e96a3a152cb84b60a264da865d57059cc22982df1412a9
CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-115560CVE-2026-98432FortinetLinux kernelNode.jsPHPPSIRTSQL injectionaccess controlarbitrary file writeauthentication bypasscommand injectiondenial of serviceexploited in the wildpath traversalremote code executionuse-after-free
What happened
Fortinet PSIRT feed describing multiple vulnerabilities across Fortinet products and third-party components. The most severe issues include a Linux kernel IPv4 TCP use-after-free RCE (CVE-2026-98432, CVSS 9.8), Node.js RCE vulnerabilities, unauthenticated Fortinet product authentication bypasses and arbitrary file-write vulnerabilities, SQL/OS command injection, and several denial-of-service and access-control flaws. One arbitrary file-write issue is reported as exploited in the wild.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 33de5f64dc2f09f2f7e96a3a152cb84b60a264da865d57059cc22982df1412a9
- Enrichment time
- 2026-11-07T20:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.