CVE-2026-71408

Published: Aug 12, 2026Modified: Oct 15, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: psirt@fortinet.com (Secondary)

Description

A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of service via <insert attack vector here>

Affected (1)

Products: Fortinet: Fortios

Fortinet

1 product

Fortios

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortios	version < 7.6.7

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (2)

https://fortiguard.fortinet.com/psirt/FG-IR-26-162

Source: psirt@fortinet.com

MitigationVendor Advisory

https://cert-portal.siemens.com/productcert/html/ssa-127084.html

Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.