FG-IR-26-268: Numeric truncation error

Published Nov 10, 2026

Updated

A Numeric Truncation Error vulnerability [cwe-197] in FortiOS and FortiSASE bgp daemon may allow a configured ibgp neighbor to send malicious/malformed attributes to all connected routers via a specially crafted request

Affected Software

12 affected componentsFixes available

Fortinet FortiOS>=8.0.0<=8.0.1

Fortinet FortiOS>=7.6.0<=7.6.7

Fortinet FortiOS>=7.4.0<=7.4.12

Fortinet FortiOS>=7.2.0<=7.2.13

Fortinet FortiSASE=6

Fortinet FortiSASE>=26.2

Fortinet FortiSASE>=26.1

Fortinet FortiSASE>=25.4

Fortinet FortiSASE>=25.3

Fortinet FortiSASE>=25.2

Fortinet FortiSASE 25.1.a=5

Fortinet FortiSASE>=25.1

Event History

Nov 10, 2026

Advisory Published

via FortiGuard·12:00 AM

Data Sourced

via FortiGuard·12:00 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attacker must be a configured iBGP neighbor. The issue is triggered by sending malicious or malformed BGP attributes in a specially crafted request.

Which systems could be affected beyond the vulnerable BGP speaker?

The malformed attributes may be propagated to all routers connected to the vulnerable FortiOS or FortiSASE BGP daemon.

FG-IR-26-268: Numeric truncation error

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which systems could be affected beyond the vulnerable BGP speaker?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Which systems could be affected beyond the vulnerable BGP speaker?