CVE-2026-22627

8.8 highEPSS 0.3%

High (8.8) in fortinet fortiswitchaxfixed. EPSS 0.3% chance of exploitation in the next 30 days.

A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an unauthenticated attacker within the same adjacent network to execute unauthorized code or commands on the device via sending a crafted LLDP packet.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE: CWE-120
Published: 2026-03-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortiswitchaxfixed

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-086

Check your stack JSON