CVE-2026-126254
A NVD · · CVE-2026-126254
Admiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
Key metrics
- CVSS
- 9.6
- EPSS
- 0%
Key insight
Although the flaw requires an already configured iBGP neighbor, that neighbor can use a single crafted request to influence the routing information of all connected routers.
Description
FortiOS versions 8.0.0 through 8.0.1, 7.6.0 through 7.6.7, 7.4.0 through 7.4.12 and 7.2.0 through 7.2.13 contain a numeric truncation error in the BGP implementation. An already configured iBGP neighbor can send crafted or malformed attributes that are propagated to all connected routers. This can corrupt routing tables or cause network instability. Exploitation requires an existing iBGP peering relationship and is therefore not possible from the internet without preconditions. There is no information yet on active exploitation or KEV listing.
Risk score
- cvss base
- 96.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 0.00
- raw before weight
- 96.00
- industry weight
- 1.21
- freshness factor
- 1.00
- exploitability factor
- 1.00
- days old
- 0.00
- vendor mismatch penalty
- 0.00
Path: operational