Is CVE-2026-106174 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-106174?

CVE-2026-106174 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-106174

Description

A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests.