gcdRadar
tags/Stacks and products

fortios

1 live · 2 on record · last incident 4 days ago

Dec ’25records per month, by first reportNov ’26

Live1

  1. live9.3
    FortiOS FortiOS/FortiSASE OSPF daemon authentication bypass via crafted LSA

    Patch now · Disclosed · since 10 Nov 2026

    An authentication bypass (CWE‑305) in the OSPF daemon of FortiOS and FortiSASE permits an unauthenticated attacker to broadcast LSAs using specially crafted requests. The vulnerability is assigned a CVSS v3 score of 9.3, indicating critical severity.

Earlier1

  1. closed
    FortiOS Fortinet patches critical FortiOS flaws found with AI help

    Patch now · Disclosed · Patched · since 26 Oct 2026