Arbitrary process termination from exposed minifilter communication port
2026-09-26T08:52:16Z•8aed4377713bf7b0b27226ff606a8baaf10b9559a85525cb9047e6fe01672387
CVE-2022-0778CVE-2026-49975CWEFortiClientFortiManagerFortiOSFortiProxyFortiSIEMFortiSandboxFortiWebFortinetPSIRTSSRFauthentication-bypassbuffer-overflowcertificate-validationcommand-injectiondenial-of-serviceimproper-access-controlinformation-disclosureremote-code-executionvulnerability-advisories
What happened
Fortinet PSIRT feed containing numerous 2026 vulnerability advisories across FortiOS, FortiProxy, FortiClient, FortiSandbox, FortiManager, FortiWeb, FortiSIEM, FortiPAM, FortiMonitorOnSight, FortiAnalyzer, FortiAuthenticator, and related products. Issues include authentication and access-control bypasses, remote code execution, information disclosure, denial of service, SSRF, certificate-validation flaws, injection vulnerabilities, buffer overflows, and WAF evasion. The highest-risk entries are static-key JWT authentication bypass in FortiMonitorOnSight (CVSS 9.6), improper authentication in a
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 8aed4377713bf7b0b27226ff606a8baaf10b9559a85525cb9047e6fe01672387
- Enrichment time
- 2026-09-26T08:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.