Vulnerability in OpenSSL library
2026-09-02T20:52:17Z•6d08e1043d7442811d63447ef2cd3666d8316312217948a907830e534d195c2c
CVE-2022-0778CVE-2026-49975Apache HTTP ServerFortiAuthenticatorFortiClientFortiManagerFortiOSFortiPortalFortiProxyFortiSIEMFortiSandboxFortiWebFortinetOpenSSLPSIRTSSRFWAF-evasionXSSauthentication-bypassbuffer-overflowcommand-injectiondenial-of-serviceinformation-disclosurepath-traversalremote-code-executionvulnerability-advisories
What happened
Fortinet PSIRT feed containing multiple vulnerability advisories across FortiOS, FortiProxy, FortiWeb, FortiManager, FortiClient, FortiSIEM, FortiSandbox, FortiAuthenticator, FortiPortal, and related products. Reported issues include authentication bypass, unauthenticated command execution, buffer overflows, information disclosure, SSRF, XSS, path traversal, WAF evasion, and denial of service. The highest-impact item is an unauthenticated OS command injection in FortiSandbox products with CVSS 9.1. The feed also includes OpenSSL CVE-2022-0778 and Apache HTTP Server CVE-2026-49975.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 6d08e1043d7442811d63447ef2cd3666d8316312217948a907830e534d195c2c
- Enrichment time
- 2026-09-02T20:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.