Linux kernel RCE CVE-2026-98432
2026-11-08T08:52:16Z•d7e7607b89bbb66dfba59a37a7d75e99613bd1257ba53365437100e4e08d646f
CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-115560CVE-2026-98432FortiAnalyzerFortiClientFortiMailFortiManagerFortiOSFortiPAMFortiProxyFortiSIEMFortiSOARFortiSandboxFortiSwitchFortinetLinux kernelNode.jsPHPSQL injectionTCP/IPv4arbitrary file writeauthentication bypasscommand injectiondenial of servicepath traversalremote code executionuse-after-freevulnerability advisories
What happened
Fortinet security advisories covering a critical Linux kernel TCP IPv4 use-after-free RCE (CVE-2026-98432), multiple Node.js and PHP vulnerabilities including reported RCEs, and numerous Fortinet product flaws. The highest-risk issues include unauthenticated arbitrary file write/path traversal reportedly exploited in the wild, FortiSandbox authentication bypass and sensitive-data exposure, static JWT key authentication bypass, and several command-injection or arbitrary-code-execution vulnerabilities. Advisories span FortiOS, FortiProxy, FortiSwitch, FortiSIEM, FortiSandbox, FortiManager, Forti
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- d7e7607b89bbb66dfba59a37a7d75e99613bd1257ba53365437100e4e08d646f
- Enrichment time
- 2026-11-08T08:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.