Numeric truncation error
Teaser from the source
CVSSv3 Score: 9.6 A Numeric Truncation Error vulnerability [cwe-197] in FortiOS and FortiSASE bgp daemon may allow a configured ibgp neighbor to send malicious/malformed attributes to all connected routers via a specially crafted request Revised on 2026-11-13 00:00:00
This is the RSS-feed teaser. Read the full article at the original source.
Read at Fortinet PSIRTMore on truncation
Other advisories
- HighCVE-2026-13269Quest NetVault Backup StnzCreateKey Numeric Truncation Error Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-o…
- CriticalCVE-2026-126254A numeric truncation error vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 th…
- MediumCVE-2026-123876Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation
- MediumCVE-2026-58813In mmap of mman.c, there is a possible way to trigger an out of bounds read and write via mapping size truncation due to an incorrect bounds check. This coul…
- HighCVE-2026-119988Numeric truncation error in Windows SMB allows an authorized attacker to execute code over a network.
- MediumCVE-2026-119875Numeric truncation error in Windows Storport Miniport Driver allows an authorized attacker to disclose information with a physical attack.
- HighCVE-2026-111308Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- MediumCVE-2026-112750Numeric truncation error in Windows Overlay Filter allows an authorized attacker to disclose information locally.
Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-268
ID