Linux kernel RCE CVE-2026-98432
2026-11-02T20:52:18Z•aeb3c57e8137b0186d4a0cf3618c6cd207a85fa2cfbdbf1089202c3dcb6acf66
CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-98432FortiAnalyzerFortiMailFortiManagerFortiOSFortiSIEMFortiSandboxFortinetLinux-kernelNode.jsPHPSQL-injectionaccess-controlarbitrary-file-writeauthentication-bypasscommand-injectiondenial-of-serviceexploited-in-the-wildpath-traversalremote-code-executionsecurity-advisories
What happened
Fortinet security advisories describe multiple vulnerabilities across Fortinet products and third-party components. The most severe issues include unauthenticated arbitrary file write/path traversal reportedly exploited in the wild, authentication bypasses, remote code execution in Linux kernel, PHP, Node.js, and FortiSIEM-related components, SQL/OS command injection, and sensitive-data exposure. Additional advisories cover denial of service, access-control flaws, XSS, process termination, and resource consumption. Several entries lack explicit CVE identifiers in the supplied document.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- aeb3c57e8137b0186d4a0cf3618c6cd207a85fa2cfbdbf1089202c3dcb6acf66
- Enrichment time
- 2026-11-02T20:52:18Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.