Arbitrary process termination from exposed minifilter communication port
2026-09-20T20:52:15Z•9c2206560cdab947ef8f19772cf9c366cbb2b47ac071f7d95917d11866bc6775
CVE-2022-0778CVE-2026-49975CWE-120CWE-284CWE-287CWE-295CWE-77FortinetPSIRTauthentication-bypassbuffer-overflowcertificate-validationcommand-injectiondenial-of-serviceimproper-access-controlinformation-disclosureremote-code-executionvulnerability-advisories
What happened
Fortinet PSIRT advisories disclose multiple vulnerabilities across FortiOS, FortiProxy, FortiClient, FortiManager, FortiSandbox, FortiSIEM, FortiWeb, FortiPAM, FortiMonitorOnSight, FortiAuthenticator, FortiAnalyzer, FortiSOAR and related products. Issues include unauthenticated authentication bypass, sensitive-information disclosure, remote code execution, access-control flaws, certificate-validation weaknesses, denial of service, injection, memory-safety bugs and web vulnerabilities. The most severe items are a static JWT signing key enabling authentication bypass in FortiMonitorOnSight (CVSS
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 9c2206560cdab947ef8f19772cf9c366cbb2b47ac071f7d95917d11866bc6775
- Enrichment time
- 2026-09-20T20:52:15Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.