Node2Shell CVEs
2026-11-04T20:52:16Z•bccbf5ed196cf352eb33dc8a64e3ffbfa01de11d2b1c520fd37d79e7ab156dc3
CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-98432FortiAnalyzerFortiClientFortiMailFortiManagerFortiOSFortiPAMFortiSIEMFortiSOARFortiSandboxFortinetLinux kernelNode.jsPHPPSIRTSQL-injectionaccess-controlarbitrary-file-writeauthentication-bypasscommand-injectiondenial-of-serviceexploited-in-the-wildmemory-safetypath-traversalremote-code-execution
What happened
Fortinet PSIRT feed aggregating vulnerabilities across Node.js, Linux kernel, PHP, FortiOS, FortiSIEM, FortiSandbox, FortiManager, FortiAnalyzer, FortiMail, FortiSOAR, FortiPAM, FortiClient, and related products. Issues include multiple critical remote code execution, authentication bypass, arbitrary file write/path traversal, SQL or OS command injection, access-control flaws, denial of service, XSS, and memory-safety vulnerabilities. The highest-priority item is a CVSS 9.8 unauthenticated arbitrary file-write path traversal vulnerability reported as exploited in the wild. Node.js, PHP, and a
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- bccbf5ed196cf352eb33dc8a64e3ffbfa01de11d2b1c520fd37d79e7ab156dc3
- Enrichment time
- 2026-11-04T20:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.