Numeric truncation error
CVSSv3 Score: 9.6 A Numeric Truncation Error vulnerability [cwe-197] in FortiOS and FortiSASE bgp daemon may allow a configured ibgp neighbor to send malicious/malformed attributes to all connected routers via a specially crafted request Revised on 2026-11-13 00:00:00
Read at Fortinet PSIRT Advisories
- Vendor
- Fortinet
- Product
- FortiOS / FortiGate, FortiPortal / FortiVoice / FortiRecorder
- CVSS v3.0
- 9.6
- Exposure class
- Edge / VPN / firewall
Why it ranks 50 (High)
- CVSS v3.0 9.6 critical
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Fortinet)
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Fortinet PSIRT Advisories (fortiguard.fortinet.com)