ospf
1 live · 1 on record · last incident 4 days ago
Live1
- live9.3FortiOS FortiOS/FortiSASE OSPF daemon authentication bypass via crafted LSA
Patch now · Disclosed · since 10 Nov 2026
An authentication bypass (CWE‑305) in the OSPF daemon of FortiOS and FortiSASE permits an unauthenticated attacker to broadcast LSAs using specially crafted requests. The vulnerability is assigned a CVSS v3 score of 9.3, indicating critical severity.
Earlier0
Nothing closed yet.