Arbitrary process termination from exposed minifilter communication port
2026-09-18T20:52:15Z•75a699813ad1e8903cb5926d19d1a6f7351781b518b57bbd89c53dec3dad2e2e
CVE-2022-0778CVE-2026-49975CWE-120CWE-125CWE-284CWE-287CWE-295CWE-476CWE-601CWE-77CWE-918FortinetPSIRTauthentication-bypassbuffer-overflowcertificate-validationcommand-injectiondenial-of-serviceimproper-access-controlremote-code-executionsensitive-information-disclosurevulnerability-disclosure
What happened
Fortinet’s PSIRT feed reports numerous vulnerabilities across FortiOS, FortiProxy, FortiClient, FortiSandbox, FortiManager, FortiWeb, FortiSIEM, FortiMonitor, FortiPAM, FortiAnalyzer, FortiAuthenticator, FortiClient EMS, FortiSOAR, and related products. Issues include unauthenticated authentication bypass, authentication weakening, sensitive-information disclosure, remote code execution, improper access control, certificate-validation flaws, command injection, memory corruption, denial of service, SSRF, XSS, and WAF evasion. The most severe items are a static JWT signing key enabling unauthent
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 75a699813ad1e8903cb5926d19d1a6f7351781b518b57bbd89c53dec3dad2e2e
- Enrichment time
- 2026-09-18T20:52:15Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.