Arbitrary process termination from exposed minifilter communication port
2026-09-24T20:52:16Z•44740465d1bc771970409429379e11720a8be2f1b72a5cf84c4d590dfda826a7
CVE-2022-0778CVE-2026-49975CWEFortiAuthenticatorFortiClientFortiManagerFortiMonitorOnSightFortiOSFortiPAMFortiProxyFortiSIEMFortiSOARFortiSandboxFortiWebFortinetPSIRTauthentication-bypassbuffer-overflowcertificate-validationcommand-injectiondenial-of-serviceimproper-access-controlinformation-disclosureremote-code-executionvulnerability-disclosure
What happened
Fortinet PSIRT advisories disclose multiple vulnerabilities across FortiOS, FortiProxy, FortiSandbox, FortiManager, FortiWeb, FortiClient, FortiSIEM, FortiAuthenticator, FortiSOAR, FortiPAM, FortiMonitorOnSight, and related products. The most severe issues include authentication bypasses, unauthenticated sensitive-information disclosure, forged JWT authentication, remote code execution, and improper certificate validation enabling man-in-the-middle attacks. The feed also references OpenSSL CVE-2022-0778 and Apache HTTP Server CVE-2026-49975, primarily causing denial of service. CVSS scores in6
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 44740465d1bc771970409429379e11720a8be2f1b72a5cf84c4d590dfda826a7
- Enrichment time
- 2026-09-24T20:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.