Skip to content
Sign in
5.1 Medium

CVE-2026-22628 An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated…

Description

An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted SSH config file.

CVSS 3.1 detail

Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:O/RC:C

Exploitable with local access to the machine, with an ordinary account and without any user action; the impact on data or service is limited.

Attack vector
Local
Attack complexity
Low
Privileges required
Low
Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Affected products and versions

Product Affected versions Fixed in
FortiSwitchAXFixed 1.0 1.0.0 → 1.0.1 No fix stated

Other CVEs of FortiSwitchAXFixed

The 2 CVEs of FortiSwitchAXFixed →
CVE-2026-22627 A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed… 7.7 High
Track this CVE