ZDI-CAN-28660
MEDIUM 6.5
Overdue
Dec 09, 2025
Fortinet
Fortinet is a major cybersecurity vendor known for firewalls, VPNs, and network security appliances. This medium-severity denial of service vulnerability requires network access and valid credentials to exploit, but causes no data exposure or system compromise—only availability disruption. Security teams should monitor Fortinet's advisory channels closely after the April 2026 patch deadline and prioritize updates for internet-facing or multi-user deployments where authenticated attackers could launch DoS attacks.
Advisory Details
Researcher
Discovered by:
Jason McFadyen of Trend Research
Reported
December 09, 2025
Deadline
April 08, 2026
9d overdue
CVSS Vector
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H