Node2Shell CVEs
2026-10-31T20:52:17Z•dee1e7f75986945bc7df86991cf748157b2fc089872e216a40016f2aa14f700a
CVE-2022-0778CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497FortiAnalyzerFortiClientFortiMailFortiManagerFortiMonitorOnSightFortiOSFortiPAMFortiProxyFortiSIEMFortiSOARFortiSandboxFortinetNode.jsOpenSSLPHPPSIRTSQL-injectionaccess-controlarbitrary-file-writeauthentication-bypasscommand-injectiondenial-of-serviceinformation-disclosurepath-traversalremote-code-execution
What happened
Fortinet PSIRT advisories covering numerous vulnerabilities across FortiOS, FortiProxy, FortiSIEM, FortiSandbox, FortiManager, FortiAnalyzer, FortiMail, FortiClient, FortiSOAR, FortiPAM, FortiMonitorOnSight, Node.js, PHP, and OpenSSL. Issues include unauthenticated remote code execution, arbitrary file write, authentication bypass, SQL/OS/command injection, path traversal, information disclosure, denial of service, access-control flaws, XSS, and certificate-validation weaknesses. The highest-risk items include multiple CVSS 9.8–9.9 vulnerabilities, including one reported as exploited in the野野野
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- dee1e7f75986945bc7df86991cf748157b2fc089872e216a40016f2aa14f700a
- Enrichment time
- 2026-10-31T20:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.