Arbitrary file write in grpc phQueryMaster
2026-10-18T20:52:17Z•ecf9fa4ee3ff0056249c932fd94cfdc993e35196f7696b6131b511e70e27e44e
CVE-2022-0778CVE-2026-49975Apache HTTP ServerFortiAnalyzerFortiMailFortiManagerFortiOSFortiProxyFortiSIEMFortiSandboxFortiWebFortinetOpenSSLPSIRTSQL-injectionXSSaccess-controlarbitrary-file-writeauthentication-bypasscommand-injectiondenial-of-serviceexploited-in-the-wildhardcoded-cryptographic-keypath-traversalvulnerability-disclosure
What happened
Fortinet PSIRT feed aggregating numerous vulnerabilities across FortiOS, FortiProxy, FortiSIEM, FortiSandbox, FortiManager, FortiAnalyzer, FortiMail, FortiWeb, FortiClient, FortiSOAR, FortiPAM and related components. Issues include unauthenticated authentication bypass, arbitrary file write, command execution, SQL injection, path traversal, access-control flaws, cryptographic key weaknesses, denial of service and XSS. Several vulnerabilities have critical CVSS scores up to 9.9, and one arbitrary-file-write issue is reported as exploited in the wild. The feed also references CVE-2022-0778 and a
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- ecf9fa4ee3ff0056249c932fd94cfdc993e35196f7696b6131b511e70e27e44e
- Enrichment time
- 2026-10-18T20:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.