NetSight
high7.5

CVE-2026-106174

A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device…

Impact

A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests.

Affected products

VendorProductAffected versions
FortinetFortinet FortiOS 8.0.0, FortiOS 7.6.4
through 7.6.6

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References