CVE-2026-71408

EUVD-2026-57189
A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an unauthenticated attacker to perform a slow HTTP DoS attack on the web interface via crafted HTTP requests.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 50.28%
Affected Products (NVD)
VendorProductVersion
fortinetfortios
𝑥
< 7.6.7
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
SiemensRUGGEDCOM APE1808
𝑥
< *
ADP
Common Weakness Enumeration
References
https://fortiguard.fortinet.com/psirt/FG-IR-26-162
https://cert-portal.siemens.com/productcert/html/ssa-127084.html