Arbitrary process termination from exposed minifilter communication port
2026-09-29T08:52:15Z•ede894608d846e5a56eeee709dbccae5c86dca24ea7535e06c02b1ce90ed2904
CVE-2022-0778CVE-2026-49975Apache HTTP ServerFortiAnalyzerFortiAuthenticatorFortiClientFortiManagerFortiMonitorFortiOSFortiPAMFortiProxyFortiSIEMFortiSandboxFortiWebFortinetOpenSSLPSIRTSSRFWAF-evasionaccess-controlauthentication-bypassbuffer-overflowcertificate-validationcommand-injectiondenial-of-serviceinformation-disclosureremote-code-execution
What happened
Fortinet PSIRT advisories covering multiple vulnerabilities disclosed or revised in 2026 across FortiOS, FortiProxy, FortiClient, FortiManager, FortiSandbox, FortiSIEM, FortiWeb, FortiMonitor, FortiPAM, FortiAuthenticator, FortiAnalyzer and related products. Issues include authentication and access-control bypasses, unauthenticated sensitive-information disclosure, remote code execution, command injection, SSRF, certificate-validation flaws, buffer overflows, denial of service, WAF evasion, XSS, path traversal and memory disclosure. The highest-risk items include forged-JWT authentication-byp
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- ede894608d846e5a56eeee709dbccae5c86dca24ea7535e06c02b1ce90ed2904
- Enrichment time
- 2026-09-29T08:52:15Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.