CVE-2021-26111

6.5 mediumEPSS 0.4%

Medium (6.5) in fortinet fortiswitch. EPSS 0.4% chance of exploitation in the next 30 days.

A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory by sending specifically crafted LLDP/CDP/EDP packets to the device.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-401
Published: 2021-06-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortiswitch

References

https://fortiguard.com/advisory/FG-IR-21-026
https://fortiguard.com/advisory/FG-IR-21-026

Check your stack JSON