Skip to content
NewA calmer, faster ZeroHour
StoryVulnerabilityhigh

Fortinet revises OSPF authentication-bypass notice FG-IR-26-267

1 source · 2 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Fortinet revised an OSPF daemon authentication-bypass notice rated 9.3, with no versions, fix, or exploitation status.

On November 10, 2026, Fortinet PSIRT revised FG-IR-26-267, an authentication bypass by primary weakness in the OSPF daemon of FortiOS and FortiSASE. An unauthenticated attacker may broadcast LSAs with a specially crafted request. Fortinet scores the issue CVSSv3 9.3 and classifies it as CWE-305. The notice gives no affected versions, fixed release, or exploitation status.

Key facts
  • Tracked as FG-IR-26-267 and classified as CWE-305.
  • The issue is in the FortiOS and FortiSASE OSPF daemon.
  • Described impact is broadcasting LSAs, not code execution.
  • The notice lists no affected versions, fix, or exploitation status.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Nov 10, 2026Fortinet PSIRT revised advisory FG-IR-26-267 · Fortinet PSIRT

What each outlet adds

beyond the shared facts
  • Fortinet PSIRTScores the OSPF issue 9.3 and gives no versions or fix.
Vendors
Fortinet
Products
FortiOSFortiSASEFortiProxyFortiPam

Coverage

oldest first · one row per article · UTC
  1. · 1d ago Fortinet PSIRTFirst report

    FortiOS and FortiSASE OSPF flaw lets unauthenticated attackers send LSAs

    Fortinet rates the CWE-305 weakness 9.3; the notice gives no versions, fix, or exploitation status.

  2. · 1d ago Fortinet PSIRT

    Fortinet sshd path traversal can bypass authentication without login

    The CVSS 7.4 issue also covers FortiSASE, FortiProxy and FortiPam; the notice lists no versions or exploitation.