Medium severity5.3NVD Advisory· Published Aug 12, 2026· Updated Oct 29, 2026
CVE-2026-71408
CVE-2026-71408
Description
A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an unauthenticated attacker to perform a slow HTTP DoS attack on the web interface via crafted HTTP requests.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- fortiguard.fortinet.com/psirt/FG-IR-26-162nvdMitigationVendor Advisory
- cert-portal.siemens.com/productcert/html/ssa-127084.htmlnvd
News mentions
1- Fortinet Patches Multiple Authentication Vulnerabilities in FortiWeb, FortiManager, and FortiClientCyber Security News · Aug 13, 2026