CVE-2026-71408: A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.

Description

A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of service via <insert attack vector here>

Affected Products

Vendor	Product	Versions
fortinet	fortios	7.6.0, 7.4.0, 7.2.0, 7.0.0, 6.4.0

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-162

Related News (2 articles)

Tier C

VulDB7h ago

CVE-2026-71408 | Fortinet FortiOS prior 6.4.16/7.0.19/7.2.13/7.4.12/7.6.6 allocation of resources

→ No new info (linked only)

Tier A

Fortinet PSIRT14h ago

UI DoS attack

→ No new info (linked only)

CVSS 3.15.0 MEDIUM

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

CISA KEV❌ No

Actively exploited❌ No

CWECWE-770

PublishedAug 12, 2026

Trending Score43

Source articles2

Independent2

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-26035

CVE-2026-26035: An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.

Trending: 52

MEDIUMCVE-2026-70466

CVE-2026-70466: A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.

Trending: 48

HIGHCVE-2026-70465

CVE-2026-70465: A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.

Trending: 42

HIGHCVE-2026-70468

CVE-2026-70468: A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.

Trending: 42

MEDIUMCVE-2026-71407

CVE-2026-71407: A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an

Trending: 38

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Aug 12, 2026

Discovered by ZDM

Aug 12, 2026