Fortinet CVE-2026-22627
HIGHCVSS VectorNVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
2DescriptionNVD
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an unauthenticated attacker within the same adjacent network to execute unauthorized code or commands on the device via sending a crafted LLDP packet.
AnalysisAI
vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 versions up to 1.0.1 is affected by classic buffer overflow (CVSS 8.8).
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Inventory all FortiSwitchAX deployments and isolate affected devices (1.0.0-1.0.1) from untrusted networks; implement network segmentation and restrict administrative access. Within 7 days: Deploy compensating controls including enhanced network monitoring and WAF rules to detect exploit attempts; consider firmware rollback to pre-1.0.0 versions if available. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today