Improper limitation of a pathname to a restricted directory
2026-10-09T20:52:16Z•363cdbd5157ea5b298ff005d1c451a9bfcaa88f1faebf6198b93c23b94d0ee87
CVE-2022-0778CVE-2026-49975CWE-120CWE-121CWE-158CWE-22CWE-284CWE-287CWE-295CWE-77CWE-770CWE-918FortiOSFortiProxyFortinetPSIRTaccess-controlactively-exploitedarbitrary-file-writeauthentication-bypasscommand-injectiondenial-of-serviceimproper-authenticationinformation-disclosurepath-traversalremote-code-executionvulnerability-disclosure
What happened
Fortinet PSIRT feed containing numerous vulnerabilities across FortiOS, FortiProxy, FortiClient, FortiManager, FortiSandbox, FortiSIEM, FortiSOAR, FortiPAM, FortiWeb, FortiMonitorOnSight, and related products. The highest-risk items include an actively exploited unauthenticated path traversal and NULL-byte flaw enabling arbitrary file writes (CVSS 9.8), static-key JWT authentication bypass (9.6), improper authentication in the FortiPAM browser extension (9.1), unauthenticated sensitive-information exposure through FortiSandbox NAT rule control (8.9), and FortiWeb RADIUS authentication bypass (
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 363cdbd5157ea5b298ff005d1c451a9bfcaa88f1faebf6198b93c23b94d0ee87
- Enrichment time
- 2026-10-09T20:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.