#fortios
3 articles
Security Alerts Nov 12, 2026
CVE-2026-126253: Authentication Bypass in Fortinet FortiOS (LSA)
An authentication bypass in FortiOS 7.2–8.0 lets an unauthenticated attacker on an adjacent network broadcast LSAs via a crafted request and influence routing...
Security Alerts Nov 12, 2026
CVE-2026-126254: Numeric Truncation in Fortinet FortiOS BGP
A numeric truncation error in FortiOS 7.2–8.0 lets a configured iBGP neighbor send malicious or malformed attributes to all connected routers...
Security Alerts Nov 12, 2026
CVE-2026-126259: Missing Authentication in Fortinet FortiOS HA
Missing authentication in FortiOS 7.2–8.0.0 lets an attacker execute commands as super admin via HA packets when FGSP with standalone-config-sync or autoscale is enabled...