Vulnerability in OpenSSL library
2026-09-01T20:52:17Z•41429f970d70361477239f1a1fa2cc61fdee6a6119bcec5866c38dd558b00005
CVE-2022-0778CVE-2026-49975Apache HTTP ServerFortiAuthenticatorFortiClientFortiManagerFortiOSFortiPAMFortiPortalFortiProxyFortiSASEFortiSIEMFortiSandboxFortiWebFortinetOpenSSLPSIRTSSRFXSSaccess-controlauthentication-bypassbuffer-overflowcommand-injectiondenial-of-serviceinformation-disclosureremote-code-executionvulnerability-advisories
What happened
Fortinet PSIRT feed containing multiple vulnerability advisories across FortiOS, FortiWeb, FortiManager, FortiClient, FortiSIEM, FortiSandbox, FortiAuthenticator, FortiPortal, FortiProxy, FortiPAM, FortiSASE, FortiSwitch Manager, and related products. Issues include unauthenticated remote command execution, authentication bypass, arbitrary code execution, denial of service, information disclosure, SSRF, XSS, buffer overflows, path traversal, and access-control weaknesses. The most severe item is a CVSS 9.1 unauthenticated OS command injection in FortiSandbox start-VNC functionality. The feed’s
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 41429f970d70361477239f1a1fa2cc61fdee6a6119bcec5866c38dd558b00005
- Enrichment time
- 2026-09-01T20:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.