Description
A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiOS | 8.0.0, 7.6.4 – ≤ 7.6.6 | — |
Advisories 2
- SSA-127084 SSA-127084: Multiple Vulnerabilities in Fortigate NGFW before V7.6.7 on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Nov 10, 2026
- WID-SEC-2026-3933 Fortinet FortiOS: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Oct 26, 2026