Arbitrary file write in grpc phQueryMaster
2026-10-15T08:52:16Z•e78006f7918f6a28b2b4f12ac8dc6fc03f6ca2a97580d05aee260e770e3d9e69
CVE-2022-0778CVE-2026-49975FortiAnalyzerFortiClientFortiMailFortiManagerFortiOSFortiPAMFortiProxyFortiSIEMFortiSOARFortiSandboxFortiWebFortinetPSIRTaccess-controlarbitrary-file-writeauthentication-bypasscommand-injectioncvedenial-of-serviceexploited-in-the-wildpath-traversalsql-injectionvulnerability-advisoriesxss
What happened
Fortinet PSIRT advisories describing numerous vulnerabilities across FortiOS, FortiProxy, FortiSIEM, FortiSandbox, FortiManager, FortiAnalyzer, FortiMail, FortiWeb, FortiSOAR, FortiClient, FortiPAM and related products. Issues include unauthenticated authentication bypass, arbitrary file write and command execution, SQL and OS command injection, path traversal, hard-coded or static cryptographic keys, access-control flaws, denial of service, XSS, certificate-validation weaknesses, and third-party library vulnerabilities. Several issues have critical CVSS scores of 9.8 or higher, and one path/널
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- e78006f7918f6a28b2b4f12ac8dc6fc03f6ca2a97580d05aee260e770e3d9e69
- Enrichment time
- 2026-10-15T08:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.