PT-2026-24243 · Fortinet · Fortiweb

Michele Damico

·

Published

2026-03-10

·

Updated

2026-03-17

·

CVE-2026-24017

CVSS v3.1

8.1

High

VectorAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Fortinet FortiWeb versions 7.0.0 through 7.0.11 Fortinet FortiWeb versions 7.2.0 through 7.2.11 Fortinet FortiWeb versions 7.4.0 through 7.4.10 Fortinet FortiWeb versions 7.6.0 through 7.6.5 Fortinet FortiWeb versions 8.0.0 through 8.0.2
Description An Improper Control of Interaction Frequency issue exists in Fortinet FortiWeb. This can allow a remote, unauthenticated attacker to bypass authentication rate limits by using specially crafted requests. The success of an attack depends on the attacker's resources and the complexity of the target password.
Recommendations Fortinet FortiWeb versions 7.0.0 through 7.0.11: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Fortinet FortiWeb versions 7.2.0 through 7.2.11: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Fortinet FortiWeb versions 7.4.0 through 7.4.10: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Fortinet FortiWeb versions 7.6.0 through 7.6.5: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Fortinet FortiWeb versions 8.0.0 through 8.0.2: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-799

Related Identifiers

BDU:2026-03213
CVE-2026-24017

Affected Products

Fortiweb