Linux kernel RCE CVE-2026-98432
2026-11-09T20:52:16Z•cc1cb57fe53a124061e813aa7edc267962215e25e61daad945b3271744b5e88f
CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-115560CVE-2026-98432FortinetLinux-kernelNode.jsPHPPSIRTSQL-injectionaccess-controlarbitrary-file-writeauthentication-bypasscommand-injectiondenial-of-serviceexploited-in-the-wildpath-traversalremote-code-executionvulnerability-advisories
What happened
Fortinet PSIRT feed containing multiple 2026 security advisories affecting Fortinet products and third-party software. Issues include critical unauthenticated arbitrary file write/path traversal reportedly exploited in the wild, authentication bypasses, remote code execution, command and SQL injection, access-control flaws, denial-of-service vulnerabilities, and Linux kernel/Node.js/PHP vulnerabilities. The highest-priority items are the exploited Fortinet path-traversal flaw, CVE-2026-98432 Linux kernel use-after-free RCE, Node2Shell Node.js RCEs, and critical Fortinet authentication bypass,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- cc1cb57fe53a124061e813aa7edc267962215e25e61daad945b3271744b5e88f
- Enrichment time
- 2026-11-09T20:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.