Node2Shell CVEs
2026-11-01T20:52:17Z•79f61bb68935c0e704852a2180169f9fd4d1550bd991fe7385d04626bd2c24df
CVE-2022-0778CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497CWE-22CWE-284CWE-288CWE-321CWE-540CWE-78CWE-89FortinetJWTNode.jsPHPPSIRTSQL-injectionXSSaccess-controlactively-exploitedarbitrary-file-writeauthentication-bypasscommand-injectiondenial-of-servicepath-traversalremote-code-execution
What happened
Fortinet PSIRT advisories covering multiple critical and high-severity vulnerabilities across Node.js, PHP, FortiSIEM, FortiSandbox, FortiOS, FortiProxy, FortiManager, FortiAnalyzer, FortiMail, FortiMonitorOnSight, FortiSOAR, FortiPAM, FortiClient, and related products. Issues include unauthenticated remote code execution, arbitrary file write, authentication bypass, SQL and command injection, path traversal, static-key JWT forgery, sensitive-information exposure, denial of service, XSS, and certificate-validation weaknesses. The highest-risk findings include CVSS 9.9–9.8 vulnerabilities, with
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 79f61bb68935c0e704852a2180169f9fd4d1550bd991fe7385d04626bd2c24df
- Enrichment time
- 2026-11-01T20:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.