Node2Shell CVEs
2026-11-03T20:52:16Z•a373c9ea97485202072f90b894b5de62236c86f249d8c8913bd57bba911ee204
CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-98432FortinetLinux kernelNode.jsPHPSQL injectionXSSaccess controlarbitrary file writeauthentication bypasscommand injectiondenial of serviceexploited in the wildpath traversalremote code executionuse-after-free
What happened
Fortinet advisories describe multiple vulnerabilities across Node.js, Linux kernel, PHP, and Fortinet products. The highest-risk issues include several CVSS 9.8–9.9 unauthenticated remote attacks, including remote code execution, authentication bypass, arbitrary file write, and sensitive-information exposure. One Fortinet path-traversal/NULL-byte issue is reported as exploited in the wild. Node.js and PHP vulnerabilities include remote code execution, while Linux kernel CVE-2026-98432 is a use-after-free with potential kernel exploitation. The collection also includes lower-severity denial-of-
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- a373c9ea97485202072f90b894b5de62236c86f249d8c8913bd57bba911ee204
- Enrichment time
- 2026-11-03T20:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.