CVE-2026-126253

Name of the Vulnerable Software and Affected Versions FortiOS versions 8.0.0 through 8.0.1 FortiOS versions 7.6.0 through 7.6.7 FortiOS versions 7.4.0 through 7.4.12 FortiOS versions 7.2.0 through 7.2.13

Description An authentication bypass allows an unauthenticated attacker on the same local network to broadcast Link State Advertisements (LSA) by sending a specially crafted request.

Recommendations Update FortiOS versions 8.0.0 through 8.0.1 to version 8.0.2. Update FortiOS versions 7.6.0 through 7.6.7 to version 7.6.8. At the moment, there is no information about a newer version that contains a fix for this vulnerability for FortiOS versions 7.4.0 through 7.4.12 and 7.2.0 through 7.2.13.