Arbitrary process termination from exposed minifilter communication port
2026-09-29T20:52:16Z•55e6e28df0334bec396f9a9610f83ddeca4034d3c2f8ef50d38b08af12f78433
CVE-2022-0778CVE-2026-49975Apache HTTP ServerCWEFortiAnalyzerFortiClientFortiManagerFortiMonitorOnSightFortiOSFortiPAMFortiProxyFortiSIEMFortiSandboxFortiWebFortinetOpenSSLPSIRTaccess-controlauthentication-bypasscertificate-validationcommand-injectiondenial-of-serviceinformation-disclosureremote-code-executionvulnerability-advisories
What happened
Fortinet PSIRT advisories covering multiple products and vulnerability classes, including unauthenticated authentication bypasses, sensitive information exposure, remote code execution, command injection, access-control flaws, denial of service, memory disclosure, certificate-validation weaknesses, and web vulnerabilities. The highest-risk issues are a static JWT signing key enabling authentication bypass in FortiMonitorOnSight (CVSS 9.6), improper authentication in the FortiPAM Privileged Access Agent Chrome Extension (CVSS 9.1), and unauthenticated NAT-rule control exposing sensitive FortiS
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 55e6e28df0334bec396f9a9610f83ddeca4034d3c2f8ef50d38b08af12f78433
- Enrichment time
- 2026-09-29T20:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.