CVE-2026-126254
A numeric truncation error vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12,
CVSS
9.6
Crítico
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 11 nov 2026 · Última mod.: 11 nov 2026 · CWE-197
Sin historial EPSS suficiente todavía.
A numeric truncation error vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow a configured ibgp neighbor to send malicious/malformed attributes to all connected routers via a specially crafted request
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1209753.1 BAJ1.2%
——0On affected platforms running Arista EOS with automatic certificate management configured and automatic Certificate Authority (CA) certificate retrieval enabled, a malicious packet may cause the AutoCertMgmt process to be terminated unexpectedly. Managed X.509 certificates will not be renewed automatically and may eventually expire, potentially disrupting TLS-dependent services.1dCVE-2026-882137.8 ALT24.2%
——7Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.1dCVE-2026-1199887.1 ALT51.4%
——15Numeric truncation error in Windows SMB allows an authorized attacker to execute code over a network.1dCVE-2026-1198754.0 MED28.9%
——9Numeric truncation error in Windows Storport Miniport Driver allows an authorized attacker to disclose information with a physical attack.1dCVE-2026-1129817.8 ALT33.3%
——10Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.1dCVE-2026-1127657.0 ALT23.8%
——7Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.1d