CVE-2026-126244: High severity vulnerability

Published Nov 11, 2026

Updated

A allocation of resources without limits or throttling vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated attacker to exhaust system resources, potentially resulting in a denial of service (DoS).

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade FortiAuthenticator to a version that resolves this vulnerability.
Fixed in 6.6.11
Upgrade
Upgrade FortiAuthenticator to a version that resolves this vulnerability.
Fixed in 8.0.4

Event History

Nov 11, 2026

CVE Published

via MITRE·09:31 PM

Data Sourced

via MITRE·09:31 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10 are affected.

Does exploitation require credentials or user interaction?

No. The vulnerability may be exploited by an unauthenticated attacker and does not require user interaction.

What is the expected impact of exploitation?

An attacker may exhaust system resources through unrestricted or unthrottled resource allocation, potentially causing a denial of service.

CVE-2026-126244: High severity vulnerability

Remediation

Event History

Frequently Asked Questions

Which deployments are affected?

Does exploitation require credentials or user interaction?

What is the expected impact of exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

Does exploitation require credentials or user interaction?

What is the expected impact of exploitation?