Node2Shell CVEs
2026-10-31T08:52:17Z•b35da7bb3d493b61bd1ad8f72e70f0ed60b3d50e8a9272a150464760a602be57
CVE-2022-0778CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497FortiAnalyzerFortiClientFortiMailFortiManagerFortiMonitorFortiOSFortiPAMFortiProxyFortiSIEMFortiSOARFortiSandboxFortinetNode.jsOpenSSLPHPPSIRTarbitrary-file-writeauthentication-bypasscommand-injectioncross-site-scriptingdenial-of-serviceexploited-in-the-wildpath-traversalremote-code-executionsql-injection
What happened
Fortinet PSIRT feed containing numerous 2026 vulnerabilities across Fortinet products and bundled Node.js/PHP/OpenSSL components. The highest-risk issues include unauthenticated remote code execution, authentication bypass, arbitrary file write, SQL/command injection, and vulnerabilities reportedly exploited in the wild. The feed also includes several Node.js and PHP RCE issues with CVSS 9.8.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- b35da7bb3d493b61bd1ad8f72e70f0ed60b3d50e8a9272a150464760a602be57
- Enrichment time
- 2026-10-31T08:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.