Vulnerability in OpenSSL library
2026-08-28T20:52:15Z•71c7d11dc65cf77869440e7d1029d857c6df185a3c852bb07cccc886f6276bbb
CVE-2022-0778CVE-2026-49975Apache HTTP ServerFortiAuthenticatorFortiClientFortiManagerFortiOSFortiPortalFortiProxyFortiSASEFortiSIEMFortiSandboxFortiWebFortinetOpenSSLSSRFWAF-evasionXSSaccess-controlauthentication-bypassbuffer-overflowcommand-injectiondenial-of-serviceinformation-disclosureremote-code-executionvulnerability
What happened
Fortinet PSIRT feed containing multiple vulnerability advisories affecting Fortinet products and dependencies. Issues include unauthenticated remote command execution, authentication bypass, access control flaws, buffer overflows, information disclosure, denial of service, SSRF, XSS, WAF evasion, and other weaknesses. The highest-severity item is a CVSS 9.1 unauthenticated OS command injection in FortiSandbox web UI. The feed also documents CVE-2022-0778 in OpenSSL and CVE-2026-49975 affecting Apache HTTP Server mod_http.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 71c7d11dc65cf77869440e7d1029d857c6df185a3c852bb07cccc886f6276bbb
- Enrichment time
- 2026-08-28T20:52:15Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.