Back to vendor advisories
Fortinet PSIRT AdvisoriesFG-IR-26-172

Uncontrolled Resource Consumption in SNMP

CVSSv3 Score: 5.9 A Use of Uninitialized Variable [CWE-457] vulnerability in Fortinet FortiAnalyzer SNMP daemon may allow a remote authenticated attacker with user permission to cause a denial of service via SNMP GETBULK requests. Revised on 2026-09-08 00:00:00

5.9CVSS out of 10Medium severity
Scope

What the vendor says is affected

  • FortiAnalyzer
Timeline

When this advisory changed

  1. Published by Fortinet

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

  3. Confirmed at the source

    Our collector saw this advisory during a later source check.