Vulnerability in OpenSSL library
2026-08-28T08:52:16Z•f5b5f498cf8e70a90ac68f1de36c411d1b72fde2959b65db97f342d22748a4a9
CVE-2022-0778CVE-2026-49975FortiAuthenticatorFortiClientFortiManagerFortiOSFortiPAMFortiPortalFortiProxyFortiSIEMFortiSandboxFortiWebFortinetOpenSSLPSIRTSSRFWAF-evasionauthentication-bypassbuffer-overflowcommand-injectioncross-site-scriptingdenial-of-serviceinformation-disclosureremote-code-executionvulnerability-advisories
What happened
Fortinet PSIRT feed containing multiple vulnerability advisories affecting FortiOS, FortiWeb, FortiManager, FortiClient, FortiSIEM, FortiSandbox, FortiAuthenticator, FortiPortal, FortiProxy, FortiPAM, and related products. Issues range from information disclosure, XSS, SSRF, and denial of service to authentication bypass, unauthorized access, command injection, and potential remote code execution. The highest-risk entries are unauthenticated OS command injection in FortiSandbox/FortiSandbox Cloud/PaaS (CVSS 9.1), FortiWeb RADIUS administrator authentication bypass (8.8), and several unauthent
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- f5b5f498cf8e70a90ac68f1de36c411d1b72fde2959b65db97f342d22748a4a9
- Enrichment time
- 2026-08-28T08:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.