Linux kernel RCE CVE-2026-98432
2026-11-08T20:52:17Z•52ed4995b2f505d7dd153c161152860d5ae1f1acd52e855f418b90f4d43e4dfa
CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-115560CVE-2026-98432CWE-22CWE-288CWE-78CWE-89FortinetLinux kernelNode.jsPSIRTRCESQL injectionXSSaccess controlarbitrary file writeauthentication bypasscommand injectiondenial of serviceexploited in the wildpath traversaluse-after-free
What happened
Fortinet PSIRT feed covering multiple vulnerabilities disclosed or revised in September–November 2026. The most severe issues include Linux kernel and Node.js remote-code-execution flaws, unauthenticated Fortinet product authentication bypasses, arbitrary file writes, SQL/command injection, and vulnerabilities reportedly exploited in the wild. Several additional FortiOS, FortiManager, FortiAnalyzer, FortiSandbox, FortiSIEM, FortiMail, FortiSOAR, FortiPAM, FortiClient, and FortiMonitor issues range from denial of service and access-control weaknesses to XSS and information disclosure.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 52ed4995b2f505d7dd153c161152860d5ae1f1acd52e855f418b90f4d43e4dfa
- Enrichment time
- 2026-11-08T20:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.