CVE-2026-71408

Modified Modified - Updated After Analysis

Denial of Service in Fortinet FortiOS

Publication date: 2026-08-12

Last updated on: 2026-10-29

Assigner: Fortinet, Inc.

Description

A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an unauthenticated attacker to perform a slow HTTP DoS attack on the web interface via crafted HTTP requests.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-10-29

Generated

2026-11-08

AI Q&A

2026-08-12

EPSS Evaluated

2026-11-07

NVD

CVE-2026-71408

EUVD

EUVD-2026-57189

Affected Vendors & Products

Vendor	Product	Version / Range
fortinet	fortios	to 7.6.7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

This is a denial of service vulnerability in Fortinet FortiOS versions 7.6.0 through 7.6.6, all 7.4 versions, and all 7.2 versions. It involves improper resource allocation without limits or throttling, which could allow an attacker to disrupt system availability.

Impact Analysis

An attacker could exploit this to cause a denial of service, making affected FortiOS systems unavailable. This could disrupt network operations, services, or applications relying on these systems.

Compliance Impact

This vulnerability may lead to denial of service conditions, which could disrupt the availability of systems handling sensitive data. Compliance with standards like GDPR or HIPAA often requires maintaining system availability and protecting data integrity, so such disruptions could potentially impact compliance.

Mitigation Strategies

Upgrade FortiOS to a version that addresses this vulnerability. If upgrading is not immediately possible, apply recommended configuration changes or mitigations provided by Fortinet.

Hi! I’m here to help you understand CVE-2026-71408. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...