NewsFortinet PSIRT
Authentifizierungsumgehung durch primäre Schwäche in FortiOS und FortiSASE
Teaser aus der Quelle
Eine Authentifizierungsumgehung durch eine primäre Schwäche [CWE-305] in FortiOS und FortiSASE OSPF-Daemon ermöglicht es einem unauthentifizierten Angreifer, LSA-Broadcasts über speziell gestaltete Anfragen zu senden. Der CVSSv3-Score beträgt 9,3. Es wird empfohlen, die Sicherheitslücke zu patchen.
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei Fortinet PSIRT lesenMehr zu Authentication
Weitere Advisories
- Ohne BewertungCVE-2026-111338Sensitive authentication material written to a log file in Citrix NetScaler ADC and Citrix NetScaler Gateway.
- Ohne BewertungCVE-2026-111333Memory overflow in an authentication request can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScale…
- HochCVE-2026-111342Memory overflow in LDAP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gate…
- HochCVE-2026-111341Memory overflow in client-certificate authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix …
- HochCVE-2026-111340Memory overflow in KBA (knowledge-based authentication) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citr…
- KritischCVE-2026-107415Memory overflow in Email OTP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler…
- HochCVE-2026-107414Memory overflow in WebAuth authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler G…
- HochCVE-2026-107413Memory overflow in SAML authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gate…
Weitere News-Einträge
- New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM AccessNewsThe Hacker News
- Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication BypassNewsThe Hacker News
- Exploit Attempts for GPUStack Authentication Bypass (CVE-2026-102895), (Thu, Nov 12th)NewsSANS ISC Diary
- Hackers Deploy Malware in Fresh ScreenConnect CampaignNewsSecurityWeek
- Critical Xen Orchestra Flaws Exploited in AttacksNewsSecurityWeek
- Railway breach leads to $740,000 in fraudulent AI chargesNewsBleepingComputer
- Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin AccessNewsThe Hacker News
- Critical Xen Orchestra auth bypass flaw exploited to hijack VM serversNewsBleepingComputer
Quelle: https://fortiguard.fortinet.com/psirt/FG-IR-26-267
ID