Allocation of resources without limits or throttling in fastapi
2026-11-11T20:52:16Z•33561d476ddbd463f8c5544a433051852c9286619acaf6cf0fa344761ce76725
CWE-22CWE-287CWE-639CWE-770FortiAnalyzerFortiAuthenticatorFortiMailFortiManagerFortiOSFortiProxyFortiSASEFortinetPSIRTauthentication-bypassauthorization-bypassbuffer-overflowcode-injectiondenial-of-servicepath-traversalprivilege-escalationremote-code-execution
What happened
Fortinet PSIRT advisories revised November 10, 2026 describe numerous vulnerabilities across FortiAuthenticator, FortiManager, FortiAnalyzer, FortiMail, FortiOS, FortiSASE, FortiProxy, and related products. Issues include unauthenticated authentication and authorization bypasses, remote code or command execution, path traversal, arbitrary file access, privilege escalation, code and argument injection, buffer overflows, RADIUS certificate-validation weaknesses, and denial of service. The highest-risk issues include unauthenticated path traversal leading to code execution (CVSS 9.8), FortiOS/F
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- 33561d476ddbd463f8c5544a433051852c9286619acaf6cf0fa344761ce76725
- Enrichment time
- 2026-11-11T20:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.