CVE-2026-22628

Summary

An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted SSH config file.

Affected Software

VendorProductVersion RangeStatus
FortinetFortiSwitchAXFixed1.0.0 <= 1.0.1affected

Weaknesses

  • CWE-284: Execute unauthorized code or commands

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References