VulnSocial

CVE-2026-71408Active Exploitation(fortinet / fortios)

LOWCVSS 5.3 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for fortinet fortios systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of service via <insert attack vector here>

fortinet CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-770

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • fortios

Threat summary

  • Active exploitation appears in 1 classified signals
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-08-13); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
fortinet
Products
fortios

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-08-13: 1Mentions · 2026-08-19: 1Active Exploitation · 2026-08-13: 1Technical Details · 2026-08-19: 108-1308-19
Signal classification2 categories
Active Exploitation
150.0%
General
150.0%
Referenced assets1 URL
By indicator
Classification over time
DateTotalLabels
2026-08-131
Active Exploitation1
2026-08-191
General1
Full discourse2 posts
  • 四谷言ノ助@g_yotuya
    General

    FortiOS 7.4.12 今日現在のCVEは6個 CVE-2026-71408 CVE-2026-23573 CVE-2025-62826 CVE-2025-62675 CVE-2025-54821 CVE-2025-31514 CVE-2025-54821 CVSS 6.0 EPSS 0.15 この辺が少し懸念。

    Post summary

    The post enumerates several FortiOS CVEs, noting CVSS and EPSS for one, but provides no PoC, exploits, patches, or evidence of active attacks.

    10000237
    4.3K followersView on X
  • VulDB 🛡@vuldb
    Active Exploitation

    A lot of offensive activities were identified targeting Fortinet FortiOS (CVE-2026-71408) https://vuldb.com/vuln/388996/cti

    Post summary

    The post reports that CVE‑2026‑71408 is actively exploited against Fortinet FortiOS, but lacks technical or mitigation details.

    00000165
    2.3K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
OSfortinetfortios---

Explore more

Back to dashboardfortinet CVEsfortios vulnerabilities