Numeric Truncation Error in FortiOS and FortiSASE BGP Daemon Allows Malformed Attribute Injection via iBGP Neighbor
Baseado só no resumo do feed. O site da fonte não liberou o texto completo para o Tifon, então esta análise saiu apenas do resumo publicado no feed e pode estar incompleta. Ela é atualizada quando outra fonte cobrir o assunto. Ler na fonte original ↗
Fortinet has disclosed a numeric truncation error vulnerability (CWE-197) in the BGP daemon of FortiOS and FortiSASE. This flaw allows a configured internal BGP (iBGP) neighbor to send specially crafted, malicious or malformed attributes which may propagate to all connected routers. This could potentially impact routing stability and network operations. A virtual patch named "FG-VD-62507.0day." is available through Fortinet's Managed Web Protection database update 26.118 to provide immediate mitigation before full patch deployment.
Entenda a falha
A vulnerabilidade
Fortinet disclosed a numeric truncation error (CWE-197) in the BGP daemon of FortiOS and FortiSASE, with no CVE listed in the articles. A configured iBGP neighbor can send malicious or malformed attributes through a specially crafted request, and they may reach all connected routers. The attacker needs to be a configured iBGP neighbor, so network reach and a valid BGP configuration are required. The impact is described as possible harm to routing stability and network operations. The articles do not list affected or fixed versions; full patches are only announced as forthcoming.
Como funciona
A configured iBGP neighbor sends BGP attribute data to the FortiOS or FortiSASE BGP daemon. The daemon handles that attribute data improperly and a numeric value is truncated. As a result, malformed attributes are accepted and may be passed on to all connected routers instead of being contained. The articles give no finer detail on which step or field is involved.
Por que é vulnerável
The root cause is classified as a numeric truncation error (CWE-197): the BGP daemon handles attribute data improperly, so a numeric value is cut down and the resulting attribute is not what was sent. The articles do not explain why it went unnoticed or what the final fix changes. For now Fortinet offers a virtual patch as mitigation, with full patches expected later.
Onde está
The articles place the flaw only in the BGP daemon (bgp daemon) of FortiOS and FortiSASE; no file, function or commit is named.
Como foi descoberta
The articles do not say who found the flaw or how. Fortinet published it in its PSIRT advisory FG-IR-26-268 on 2026-11-10, together with a virtual patch named FG-VD-62507.0day, available in FMWP database update 26.118. Nothing in the articles mentions exploitation in the wild.
Explicação gerada por IA a partir da matéria e dos artigos, em 12/11/2026 22:17.
Detalhes técnicos
The vulnerability lies in the improper handling of attribute data by the BGP daemon, resulting in numeric truncation errors. This can be exploited by an iBGP neighbor with valid configuration to disrupt routing information across multiple connected routers.
Remediação
Fortinet recommends applying the virtual patch FG-VD-62507.0day via the FMWP db update 26.118 as a short-term mitigation. Users should anticipate forthcoming full patches from Fortinet to permanently resolve the issue.
Linha do tempo
-
fortiguard.fortinet.com ↗ · pub. 10/11/2026 05:00 · coletado 12/11 22:01 primeiro registro só resumo do feed
Numeric Truncation Error in FortiOS and FortiSASE BGP Daemon Allows Malformed Attribute Injection via iBGP Neighbor
ler a análise desta fonte ocultar
Fortinet has disclosed a numeric truncation error vulnerability (CWE-197) in the BGP daemon of FortiOS and FortiSASE. This flaw allows a configured internal BGP (iBGP) neighbor to send specially crafted, malicious or malformed attributes which may propagate to all connected routers. This could potentially impact routing stability and network operations. A virtual patch named "FG-VD-62507.0day." is available through Fortinet's Managed Web Protection database update 26.118 to provide immediate mitigation before full patch deployment.
Technical Details
The vulnerability lies in the improper handling of attribute data by the BGP daemon, resulting in numeric truncation errors. This can be exploited by an iBGP neighbor with valid configuration to disrupt routing information across multiple connected routers.
Remediation
Fortinet recommends applying the virtual patch FG-VD-62507.0day via the FMWP db update 26.118 as a short-term mitigation. Users should anticipate forthcoming full patches from Fortinet to permanently resolve the issue.