Vulnerability in OpenSSL library
2026-08-30T08:52:30Z•49a3fd6b51ca0dcbd025a634c574866e69a035ec65f4891da16514791deffc52
CVE-2022-0778CVE-2026-49975FortiAuthenticatorFortiClientFortiManagerFortiOSFortiPAMFortiPortalFortiProxyFortiSASEFortiSIEMFortiSandboxFortiSwitch ManagerFortiWebFortinetOpenSSLPSIRTSSRFWAF-evasionXSSaccess-controlauthentication-bypassbuffer-overflowcommand-injectiondenial-of-serviceinformation-disclosureremote-code-execution
What happened
Fortinet PSIRT advisories describe multiple vulnerabilities across FortiOS, FortiWeb, FortiManager, FortiClient, FortiSIEM, FortiSandbox, FortiAuthenticator, FortiPortal, FortiProxy, FortiPAM, FortiSASE, FortiSwitch Manager and related components. Issues include authentication bypass, command injection, arbitrary code execution, denial of service, information disclosure, access-control flaws, memory corruption, SSRF, XSS, header injection and WAF evasion. The highest-risk item is unauthenticated OS command injection in FortiSandbox products (CVSS 9.1), followed by remote authentication bypass,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 49a3fd6b51ca0dcbd025a634c574866e69a035ec65f4891da16514791deffc52
- Enrichment time
- 2026-08-30T08:52:30Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.