Arbitrary process termination from exposed minifilter communication port
2026-09-10T08:52:17Z•3767a8e54f813f95c33ac72f3c4247e951b63ea68180716698c60feb25817f10
CVE-2022-0778CVE-2026-49975Apache HTTP ServerFortinetJWTOpenSSLPSIRTSSRFWAF-evasionXSSauthentication-bypassbuffer-overflowcertificate-validationcommand-injectiondenial-of-serviceimproper-access-controlinformation-disclosureremote-code-executionunauthenticated-accessvulnerability-disclosures
What happened
Fortinet PSIRT advisories disclose numerous vulnerabilities across FortiOS, FortiProxy, FortiClient, FortiManager, FortiSandbox, FortiSIEM, FortiWeb, FortiAuthenticator, FortiPAM, FortiMonitorOnSight, FortiAnalyzer, FortiSOAR and related products. The most severe issues include unauthenticated authentication bypasses, forged JWT authentication, sensitive-information exposure, remote code execution conditions, and man-in-the-middle attacks. The feed also references CVE-2022-0778 in OpenSSL and CVE-2026-49975 in Apache HTTP Server. Advisory CVSS scores range from 2.5 to 9.6, with the overall set
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 3767a8e54f813f95c33ac72f3c4247e951b63ea68180716698c60feb25817f10
- Enrichment time
- 2026-09-10T08:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.