CVE-2026-106174
Received Received - Intake

Improper Locking in Fortinet FortiOS HTTPS Management Interface

Publication date: 2026-10-27

Last updated on: 2026-10-27

Assigner: Fortinet, Inc.

Description
A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-27
Last Modified
2026-10-27
Generated
2026-10-27
AI Q&A
2026-10-27
EPSS Evaluated
N/A
NVD
CVE-2026-106174
EUVD
EUVD-2026-110616

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
Fortinet FortiOS 8.0.0
Fortinet FortiOS 7.6.4

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-667 The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an improper locking vulnerability in Fortinet FortiOS versions 8.0.0 and 7.6.4 through 7.6.6. It allows an unauthenticated attacker with network access to cause a denial of service on the HTTPS management interface by sending crafted HTTP requests.

Impact Analysis

The vulnerability can lead to the HTTPS management interface becoming unavailable, disrupting administrative access and device management. This may cause operational disruptions and loss of control over the affected Fortinet device.

Mitigation Strategies

Upgrade FortiOS to a patched version. Fortinet recommends updating to FortiOS 8.0.1 or later if using 8.0.0, or to 7.6.7 or later if using 7.6.4 through 7.6.6. Disable remote HTTPS management access if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-106174. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart