PT-2026-24240 · Fortinet · Fortiswitchaxfixed

Published 2026-03-10 · Updated 2026-03-18 · CVE-2026-22627

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiSwitchAXFixed versions 1.0.0 through 1.0.1

Description A buffer copy issue exists where the size of the input is not checked, potentially allowing an unauthenticated attacker on the same network to execute code or commands on the device. This can occur by sending a specially crafted LLDP (Link Layer Discovery Protocol) packet.

Recommendations Update FortiSwitchAXFixed to a version beyond 1.0.1.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

BDU:2026-03210

CVE-2026-22627

Affected Products

Fortiswitchaxfixed

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-22627 · Security Note
• https://fortiguard.fortinet.com/psirt/FG-IR-26-086 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03210 · Security Note
• https://twitter.com/CveFindCom/status/2031440370706375053 · Twitter Post
• https://twitter.com/CVEnew/status/2034136478574432752 · Twitter Post
• https://twitter.com/ptdbugs/status/2031429834417561623 · Twitter Post