Multiple Node.js CVEs

2026-10-26T20:52:16Z•89efb94b017bc7a04c3f8e2b25986edcbff503bbfa81b110c444637cc3ef3669
CVE-2022-0778CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497FortiAnalyzerFortiClientFortiMailFortiManagerFortiMonitorFortiOSFortiPAMFortiProxyFortiSIEMFortiSOARFortiSandboxFortinetNode.jsOpenSSLPHParbitrary-file-writeauthentication-bypasscommand-injectioncross-site-scriptingdenial-of-serviceinformation-disclosureman-in-the-middlepath-traversalremote-code-executionsql-injection

What happened

Fortinet’s security advisories describe multiple vulnerabilities across Fortinet products and bundled components, including unauthenticated arbitrary file write/path traversal reportedly exploited in the wild, authentication bypasses, remote code execution through command or SQL injection, static-key JWT forgery, information disclosure, denial of service, XSS, and certificate-validation flaws. The feed also lists multiple high-severity Node.js and PHP CVEs, including remote code execution issues, plus the OpenSSL CVE-2022-0778 denial-of-service vulnerability. The highest-risk issues are unauth

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
fortinet_blog
Record identifier
89efb94b017bc7a04c3f8e2b25986edcbff503bbfa81b110c444637cc3ef3669
Enrichment time
2026-10-26T20:52:16Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.