Arbitrary process termination from exposed minifilter communication port
2026-09-18T08:52:16Z•ebf1f36e302255f3c1f6264829a69a95353dacc0e167afbd41ab1fac3b3aea70
CVE-2022-0778CVE-2026-49975CWEFortinetPSIRTSSRFWAF-evasionauthentication-bypassbuffer-overflowcertificate-validationcommand-injectiondenial-of-serviceimproper-access-controlinformation-disclosuremultiple-vulnerabilitiesremote-code-execution
What happened
Fortinet PSIRT advisories disclose numerous vulnerabilities across FortiOS, FortiProxy, FortiSandbox, FortiManager, FortiWeb, FortiSIEM, FortiClient, FortiPAM, FortiMonitorOnSight, FortiAnalyzer, FortiAuthenticator, FortiSOAR, FortiSASE and related products. Issues include authentication and access-control bypasses, remote code execution, sensitive-information disclosure, denial of service, SSRF, command injection, memory corruption, certificate-validation flaws, XSS, open redirect and WAF evasion. The most severe items are unauthenticated authentication bypass or compromise vulnerabilities, a
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- ebf1f36e302255f3c1f6264829a69a95353dacc0e167afbd41ab1fac3b3aea70
- Enrichment time
- 2026-09-18T08:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.