Multiple Node.js CVEs
2026-10-28T08:52:17Z•47b85454cf2a52b532a70b0b58aca1a2d1dbc4feb8a0705b90e9d45a11014863
CVE-2022-0778CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497CWE-22CWE-78FortiAnalyzerFortiMailFortiManagerFortiMonitorFortiOSFortiPAMFortiProxyFortiSIEMFortiSOARFortiSandboxFortinetNode.jsOpenSSLPHPPSIRTSQL-injectionXSSarbitrary-file-writeauthentication-bypasscommand-injectiondenial-of-servicepath-traversalremote-code-execution
What happened
Fortinet PSIRT feed containing numerous vulnerabilities across Fortinet products and third-party components. The highest-risk issues include unauthenticated authentication bypasses, arbitrary file write and command execution, static-key JWT forgery, SQL/command injection, and a path traversal vulnerability reportedly exploited in the wild. It also includes multiple Node.js and PHP CVEs, including remote code execution flaws.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 47b85454cf2a52b532a70b0b58aca1a2d1dbc4feb8a0705b90e9d45a11014863
- Enrichment time
- 2026-10-28T08:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.