Linux kernel RCE CVE-2026-98432
2026-11-10T08:52:16Z•ea4bb35310e0854b999622c94d7f0b9e2d2a0a45be0560c0f4fe7e5b6cee4b94
CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497CVE-2026-115560CVE-2026-98432FortinetLinux-kernelNode.jsPHPPSIRTSQL-injectionaccess-controlarbitrary-file-writeauthentication-bypasscommand-injectiondenial-of-serviceexploited-in-the-wildpath-traversalremote-code-executionvulnerability-disclosurezero-day
What happened
Fortinet PSIRT advisories disclose numerous vulnerabilities across FortiOS, FortiProxy, FortiSIEM, FortiSandbox, FortiManager, FortiAnalyzer, FortiMail, FortiSOAR, FortiPAM, FortiClient, FortiMonitorOnSight, and related products. Impacts include unauthenticated authentication bypass, arbitrary file write and path traversal, remote code or command execution, SQL and OS command injection, sensitive-information exposure, denial of service, access-control flaws, XSS, and memory-safety issues. The most urgent items are the CVSS 9.8 Linux kernel TCP use-after-free RCE, FortiSIEM arbitrary file write
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- ea4bb35310e0854b999622c94d7f0b9e2d2a0a45be0560c0f4fe7e5b6cee4b94
- Enrichment time
- 2026-11-10T08:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.