PT-2026-24241 · Fortinet · Fortiswitchaxfixed

Michele Damico · CVE-2026-22628 · Publicado 2026-03-10 · Atualizado 2026-03-18

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fortinet FortiSwitchAXFixed versions 1.0.0 through 1.0.1

Description An improper access control issue exists in Fortinet FortiSwitchAXFixed. Exploitation may allow an authenticated administrator to execute system commands through a specially crafted SSH configuration file. The vulnerability relates to deficiencies in access control.

Recommendations Update FortiSwitchAXFixed beyond version 1.0.1.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2026-03211

CVE-2026-22628

Produtos afetados

Fortiswitchaxfixed

Referências · 4

• https://fortiguard.fortinet.com/psirt/FG-IR-26-085 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-03211 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-22628 · Nota de Segurança
• https://twitter.com/CVEnew/status/2034136483863441603 · Publicação no Twitter