What’s Vulnerable › Vulnerabilities
CVE-2021-26111
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-06-01 · updated 2026-06-17
- Weakness: CWE-401
Description
A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exhaust available memory by sending specifically crafted LLDP/CDP/EDP packets to the device.
Affected products
- Fortinet FortiSwitch: through 3.6.11; from 6.0.0 through 6.0.6; from 6.2.0 through 6.2.6; from 6.4.0 through 6.4.6
References
Get alerted when CVE-2021-26111 or the next vulnerability affects your stack