Node2Shell CVEs
2026-10-30T20:52:17Z•ffece1ca2a402666c737847bc76003fa238c094abdf04c04117ba03e3a620b6d
CVE-2022-0778CVE-2026-105481CVE-2026-105482CVE-2026-105483CVE-2026-106069CVE-2026-106070CVE-2026-106071CVE-2026-106072CVE-2026-106073CVE-2026-106074CVE-2026-109618CVE-2026-109619FortiAnalyzerFortiClientFortiMailFortiManagerFortiMonitorFortiOSFortiPAMFortiProxyFortiSIEMFortiSOARFortiSandboxFortinetNode.jsOpenSSLPHPSQL-injectionarbitrary-file-writeauthentication-bypasscommand-injectioncross-site-scriptingdenial-of-serviceexploited-in-the-wildpath-traversalprivilege-escalationremote-code-execution
What happened
Fortinet PSIRT advisories covering multiple vulnerabilities across Fortinet products and Node.js/PHP components. The collection includes several critical unauthenticated authentication bypass, arbitrary file write, command execution, SQL injection, and remote code execution issues. One path traversal/arbitrary file write vulnerability is reported as exploited in the wild. The highest-risk items include CVSS 9.9–9.8 vulnerabilities affecting FortiSandbox, FortiMonitorOnSight, FortiSandbox GUI, FortiSIEM, Fortinet products, Node.js, and PHP.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- ffece1ca2a402666c737847bc76003fa238c094abdf04c04117ba03e3a620b6d
- Enrichment time
- 2026-10-30T20:52:17Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.