Arbitrary process termination from exposed minifilter communication port
2026-09-22T20:52:15Z•9817b9d44adefa88d959ee9f7af0922833410d9432d0162546c93d0cde893566
CVE-2022-0778CVE-2026-49975Apache HTTP ServerFortiAuthenticatorFortiClientFortiManagerFortiOSFortiProxyFortiSIEMFortiSandboxFortiWebFortinetOpenSSLPSIRTSSRFWAF-evasionXSSauthentication-bypassbroken-access-controlbuffer-overflowcertificate-validationcommand-injectiondenial-of-serviceinformation-disclosureremote-code-executionvulnerability-advisories
What happened
Fortinet PSIRT advisories covering multiple vulnerabilities across FortiOS, FortiProxy, FortiClient, FortiManager, FortiSandbox, FortiSIEM, FortiWeb, FortiMonitorOnSight, FortiPAM, FortiAnalyzer, FortiAuthenticator and related products. Issues include authentication and access-control bypasses, unauthenticated sensitive-information disclosure, remote code execution, command injection, denial of service, memory disclosure, SSRF, XSS, certificate-validation flaws, WAF evasion and process termination. The most severe items are static-key JWT authentication bypass in FortiMonitorOnSight (CVSS 9.6)
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 9817b9d44adefa88d959ee9f7af0922833410d9432d0162546c93d0cde893566
- Enrichment time
- 2026-09-22T20:52:15Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.