Allocation of resources without limits or throttling in fastapi
2026-11-11T08:52:16Z•e898e7022eb0db760d124bbf1b82ae7eeecfb22bd24241694a0dcec242c44c54
CWE-122CWE-22CWE-287CWE-639CWE-94FortiAnalyzerFortiAuthenticatorFortiMailFortiManagerFortiOSFortiPAMFortiProxyFortiSASEFortinetPSIRTarbitrary-file-writeauthentication-bypassauthorization-bypassbuffer-overflowcode-injectioncommand-injectiondenial-of-servicepath-traversalprivilege-escalationremote-code-execution
What happened
Fortinet PSIRT advisories revised November 10, 2026 describe multiple vulnerabilities across FortiAuthenticator, FortiMail, FortiManager, FortiAnalyzer, FortiOS, FortiSASE, FortiProxy, FortiPAM and related cloud products. Issues include unauthenticated authentication and authorization bypasses, remote code or command execution, path traversal and arbitrary file operations, command/code injection, buffer overflows, privilege escalation, RADIUS certificate validation weaknesses, and denial of service. Several advisories have critical severity, including unauthenticated path traversal leading to
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- fortinet_blog
- Record identifier
- e898e7022eb0db760d124bbf1b82ae7eeecfb22bd24241694a0dcec242c44c54
- Enrichment time
- 2026-11-11T08:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.