CVE-2026-22627: Buffer Overflow in LLDP OUI field
A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability [CWE-120] in FortiSwitchAXFixed may allow an unauthenticated attacker within the same adjacent network to execute unauthorized code or commands on the device via sending a crafted LLDP packet.
Other sources
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an unauthenticated attacker within the same adjacent network to execute unauthorized code or commands on the device via sending a crafted LLDP packet.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22627?
CVE-2026-22627 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2026-22627?
To remediate CVE-2026-22627, upgrade FortiSwitchAXFixed to version 1.0.2 or later.
Who is affected by CVE-2026-22627?
CVE-2026-22627 affects users of FortiSwitchAXFixed versions 1.0.0 to 1.0.1.
What type of vulnerability is CVE-2026-22627?
CVE-2026-22627 is a buffer overflow vulnerability specifically in the LLDP OUI field.
Can an attacker exploit CVE-2026-22627 remotely?
Yes, an unauthenticated attacker within the same adjacent network can exploit CVE-2026-22627.