Dashboard / CVE-2026-22627

CVE-2026-22627

HIGH
MEDIUM Priority: 0.03 BB Relevance: 60/100
Published: 2026-03-10 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an unauthenticated attacker within the same adjacent network to execute unauthorized code or commands on the device via sending a crafted LLDP packet.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
Fortinet FortiSwitchAXFixed 1.0.0

References & Advisories (1)

Bug Bounty Relevance

60 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.7 / 10.0 v3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

EPSS — Exploitation Probability

0.34%
Raw Score 0.003350
Percentile 27.1%
Date 2026-11-10

EPSS Trend

2026-11-10
0.00335
2026-11-09
0.00335
2026-11-08
0.00335
2026-11-07
0.00335
2026-11-06
0.00335

Intelligence Sources

mitre ref →

External Links