Multiple Node.js CVEs
2026-10-26T20:52:16Z•89efb94b017bc7a04c3f8e2b25986edcbff503bbfa81b110c444637cc3ef3669
CVE-2022-0778CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497FortiAnalyzerFortiClientFortiMailFortiManagerFortiMonitorFortiOSFortiPAMFortiProxyFortiSIEMFortiSOARFortiSandboxFortinetNode.jsOpenSSLPHParbitrary-file-writeauthentication-bypasscommand-injectioncross-site-scriptingdenial-of-serviceinformation-disclosureman-in-the-middlepath-traversalremote-code-executionsql-injection
What happened
Fortinet’s security advisories describe multiple vulnerabilities across Fortinet products and bundled components, including unauthenticated arbitrary file write/path traversal reportedly exploited in the wild, authentication bypasses, remote code execution through command or SQL injection, static-key JWT forgery, information disclosure, denial of service, XSS, and certificate-validation flaws. The feed also lists multiple high-severity Node.js and PHP CVEs, including remote code execution issues, plus the OpenSSL CVE-2022-0778 denial-of-service vulnerability. The highest-risk issues are unauth
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 89efb94b017bc7a04c3f8e2b25986edcbff503bbfa81b110c444637cc3ef3669
- Enrichment time
- 2026-10-26T20:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.