Back to vendor advisories
Fortinet PSIRT AdvisoriesFG-IR-26-258

Allocation of resources without limits or throttling in fastapi

HighVendor CVSS 7.5 / 10 1 CVE Published Nov 10, 2026 at 8:00 AM UTC

Summary

CVSSv3 Score:

7.5

An Allocation of Resources Without Limits or Throttling vulnerability [CWE-770] in FortiAuthenticator may allow an unauthenticated attacker to exhaust system resources, potentially resulting in a denial of service (DoS).

Revised on 2026-11-10 00:00:00

Products covered

  • FortiAuthenticator

Remediation

Separate remediation guidance was not included in the collected bulletin.

CVEs in this advisory 1

Updates

  1. Published by Fortinet

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.