Node2Shell CVEs
2026-11-06T08:52:17Z•ce183969f19a76871e2c8d98fccff9ab48073f176e3bde0cab51218d0b6fa18b
CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-115560CVE-2026-98432CWE-22CWE-284CWE-287CWE-78CWE-89FortinetLinux-kernelNode.jsPSIRTSQL-injectionaccess-controlarbitrary-file-writeauthentication-bypasscommand-injectiondenial-of-serviceexploited-in-the-wildmultiple-vulnerabilitiespath-traversalremote-code-execution
What happened
Fortinet PSIRT advisories covering multiple 2026 vulnerabilities across Fortinet products and third-party components. The collection includes critical unauthenticated authentication bypasses, arbitrary file write/path traversal vulnerabilities reportedly exploited in the wild, remote code execution and command injection flaws, sensitive-information exposure, denial-of-service issues, access-control weaknesses, and Node.js and Linux kernel vulnerabilities. The highest-priority issues include CVSS 9.9–9.8 vulnerabilities affecting FortiSandbox, FortiOS-related products, FortiMonitorOnSight, Fort
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- ce183969f19a76871e2c8d98fccff9ab48073f176e3bde0cab51218d0b6fa18b
- Enrichment time
- 2026-11-06T08:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.