Vulnerability in OpenSSL library
2026-09-03T08:52:15Z•b6e2e491a757046b81218a8613f850a0e56ee5d1e435a36da2923ffa8b210f42
CVE-2022-0778CVE-2026-49975FortiAuthenticatorFortiClientFortiManagerFortiOSFortiPortalFortiProxyFortiSASEFortiSIEMFortiSandboxFortiWebFortinetSSRFWAF-evasionaccess-controlauthentication-bypassbuffer-overflowcommand-injectioncross-site-scriptingdenial-of-serviceimproper-authenticationinformation-disclosureout-of-bounds-readpath-traversalremote-code-executionvulnerability
What happened
Fortinet PSIRT feed containing multiple product vulnerabilities, including unauthenticated authentication bypasses, remote code execution, command injection, denial of service, information disclosure, access-control flaws, and memory-safety issues. The highest-risk item is an unauthenticated OS command injection in FortiSandbox products (CVSS 9.1), followed by FortiWeb authentication bypass (8.8), unauthenticated VNC exposure (7.7), LDAP authentication bypass (7.5), and OpenSSL CVE-2022-0778 denial of service (CVSS 7.5).
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- b6e2e491a757046b81218a8613f850a0e56ee5d1e435a36da2923ffa8b210f42
- Enrichment time
- 2026-09-03T08:52:15Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.