Arbitrary process termination from exposed minifilter communication port
2026-09-10T20:52:16Z•a71800792a488c57feb72ba382ce454d232c45aaba3a42825c84b733b1ca861c
CVE-2022-0778CVE-2026-49975FortiClientFortiManagerFortiOSFortiPAMFortiProxyFortiSIEMFortiSOARFortiSandboxFortiWebFortinetOpenSSLPSIRTaccess-controlauthentication-bypasscertificate-validationcommand-injectiondenial-of-serviceinformation-disclosureremote-code-executionvulnerability-disclosure
What happened
Fortinet PSIRT advisories disclose multiple vulnerabilities across FortiOS, FortiProxy, FortiClient, FortiManager, FortiSandbox, FortiSIEM, FortiWeb, FortiSOAR, FortiPAM, FortiMonitorOnSight, FortiAnalyzer, FortiAuthenticator and related products. Issues include unauthenticated authentication bypass, sensitive-information disclosure, remote code execution, command injection, access-control bypass, certificate-validation failures, denial of service, memory disclosure, SSRF, XSS and WAF evasion. The highest-risk items are a static JWT signing key enabling unauthenticated authentication bypass (9
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- a71800792a488c57feb72ba382ce454d232c45aaba3a42825c84b733b1ca861c
- Enrichment time
- 2026-09-10T20:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.