5.0Medium

CVE-2026-71408

Fortinet FortiOS; Siemens RUGGEDCOM APE1808 Published: 2026-08-12 15:19 (3 months ago)

Description

A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an unauthenticated attacker to perform a slow HTTP DoS attack on the web interface via crafted HTTP requests.

Weakness (CWE): CWE-770

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
Fortinet	FortiOS	7.6.0 – ≤ 7.6.6, 7.4.0 – ≤ 7.4.13, 7.2.0 – ≤ 7.2.14, 7.0.0 – ≤ 7.0.19, 6.4.0 – ≤ 6.4.16
Siemens	RUGGEDCOM APE1808	0

References and patches

https://fortiguard.fortinet.com/psirt/FG-IR-26-162 MitigationVendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-127084.html

CPE matches (NVD) (1)

cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* < 7.6.7

CVSS score

5.0Medium

Source: fortinet · CVSS 3.1

Attack vector: Network
Attack complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: Low

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

All scores (2)

cna	CVSS 3.1	5.0Medium
psirt@fortinet.com	CVSS 3.1	5.3Medium

EPSS (chance of exploitation in 30 days)

0.62%

higher than 51% of all CVEs

CISA assessment (SSVC)

Exploitation: none
Automatable: yes
Technical impact: partial

Timeline

ID reserved2026-08-06
Published2026-08-12 15:19
Reached IP-DB2026-10-24 23:40
Last updated2026-11-10 15:49

Assigned by (CNA): fortinet
NVD status: Modified

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Description

Affected products and versions

References and patches

CPE matches (NVD) (1)

Recent CVEs in the same product — Fortinet (all products)