Node2Shell CVEs
2026-10-29T20:52:17Z•ecf0a52344e6f4573fbe80ab152a5b3123a63703f87e13eaf9b76d7f23a0cc01
CVE-2022-0778CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619CVE-2026-111497FortiAnalyzerFortiMailFortiManagerFortiOSFortiPAMFortiSIEMFortiSandboxFortinetNode.jsOpenSSLPHPaccess-controlarbitrary-file-writeauthentication-bypasscommand-injectioncritical-vulnerabilitiescross-site-scriptingdenial-of-serviceexploited-in-the-wildpath-traversalremote-code-executionsecurity-advisoriessql-injection
What happened
Fortinet’s advisory feed contains multiple 2026 and historical vulnerabilities affecting Fortinet products and bundled components, including unauthenticated authentication bypasses, arbitrary file write/path traversal, command injection, SQL injection, RCE, denial of service, XSS, access-control flaws, and certificate-validation issues. Several issues have critical severity scores up to 9.9, including one reported as exploited in the wild. The feed also lists Node.js and PHP vulnerabilities with CVEs, including remote code execution affecting supported Node.js and PHP versions.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- ecf0a52344e6f4573fbe80ab152a5b3123a63703f87e13eaf9b76d7f23a0cc01
- Enrichment time
- 2026-10-29T20:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.