Linux kernel RCE CVE-2026-98432

2026-11-09T20:52:16Z•cc1cb57fe53a124061e813aa7edc267962215e25e61daad945b3271744b5e88f
CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-115560CVE-2026-98432FortinetLinux-kernelNode.jsPHPPSIRTSQL-injectionaccess-controlarbitrary-file-writeauthentication-bypasscommand-injectiondenial-of-serviceexploited-in-the-wildpath-traversalremote-code-executionvulnerability-advisories

What happened

Fortinet PSIRT feed containing multiple 2026 security advisories affecting Fortinet products and third-party software. Issues include critical unauthenticated arbitrary file write/path traversal reportedly exploited in the wild, authentication bypasses, remote code execution, command and SQL injection, access-control flaws, denial-of-service vulnerabilities, and Linux kernel/Node.js/PHP vulnerabilities. The highest-priority items are the exploited Fortinet path-traversal flaw, CVE-2026-98432 Linux kernel use-after-free RCE, Node2Shell Node.js RCEs, and critical Fortinet authentication bypass,

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
fortinet_blog
Record identifier
cc1cb57fe53a124061e813aa7edc267962215e25e61daad945b3271744b5e88f
Enrichment time
2026-11-09T20:52:16Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.