2 CVEs
HIGH
CVSS 8.8
Fortinet FortiSwitchAXFixed Access Control Issues
2026-03-10
CVE-2026-22627
HIGH
vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 versions up to 1.0.1 is affected by classic buffer overflow (CVSS 8.8).
8.8
CVSS
0.0%
EPSS
CVE-2026-22628
MEDIUM
Fortinet FortiSwitchAXFixed versions 1.0.0 through 1.0.1 contain an access control flaw that allows authenticated administrators to execute arbitrary system commands by uploading a malicious SSH configuration file. The vulnerability requires local access and valid admin credentials but poses a risk to organizations where admin accounts may be compromised or where insider threats are a concern. No patch is currently available.
5.3
CVSS
0.0%
EPSS