CVE-2026-22627 — Fortinet / FortiSwitchAXFixed

CVE-2026-22627

Fortinet / FortiSwitchAXFixed PUBLISHED

Description (CNA)

A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an unauthenticated attacker within the same adjacent network to execute unauthorized code or commands on the device via sending a crafted LLDP packet.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiSwitchAXFixed	affected 1.0.0 through 1.0.1

CWE

CWE-120

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-086

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.