# CVE-2026-106174: Fortinet FortiOS improper locking in HTTPS management interface

Source: https://junglewise.ai/threats/cve-2026-106174-a-improper-locking-vulnerability-in-fortinet-fortios-8-0-0  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-27. Updated: 2026-10-27  
License: CC BY 4.0 with a link back

CVE-2026-106174 · Severity: high · CVSS 7.5 · Published 2026-10-27

An improper locking flaw in FortiOS, which provides network security and management capabilities, allows an unauthenticated attacker to disrupt the HTTPS management interface through specially crafted requests, preventing administrators from accessing device controls. This denial-of-service vulnerability affects the GUI component and can be exploited remotely without any authentication or user interaction.

Technologies: [Fortinet FortiOS](https://junglewise.ai/threats/technologies/fortios). Vendors: [Fortinet](https://junglewise.ai/threats/vendors/fortinet).

## Quick answers

**Is CVE-2026-106174 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-106174 being exploited in the wild.

**How severe is CVE-2026-106174?** High severity, with a CVSS score of 7.5, published 27 October 2026.

**Which products and versions are affected?** Fortinet FortiOS 8.0.0, 7.6.4 through 7.6.6.

**Is there a fix for CVE-2026-106174?** Yes: fixed in FortiOS 8.0.1 or above; FortiOS 7.6.7 or above. Until then: A virtual patch named "FG-VD-61291.0day." is available in FMWP database update 26.073 for systems that cannot be immediately upgraded.</anigation>
<parameter name="timeline">[
  {
    "kind": "disclosed",
    "at": "2026-10-13"
  },
  {
    "kind": "advisory",
    "at": "2026-10-27"
  }
] Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-106174 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-106174?** Check whether you run Fortinet FortiOS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in FortiOS 8.0.1 or above; FortiOS 7.6.7 or above

A virtual patch named "FG-VD-61291.0day." is available in FMWP database update 26.073 for systems that cannot be immediately upgraded.</anigation>
<parameter name="timeline">[
  {
    "kind": "disclosed",
    "at": "2026-10-13"
  },
  {
    "kind": "advisory",
    "at": "2026-10-27"
  }
]

## Technical details

The vulnerability is a CWE-667 improper locking issue in the FortiOS GUI component that fails to properly serialize or lock access to critical resources. An unauthenticated attacker with network access can send crafted HTTP requests to trigger a denial of service condition affecting the HTTPS management interface. The attack vector is network-based with no authentication required; affected versions are FortiOS 8.0.0 and 7.6.4 through 7.6.6, with patches available.

## Affected products

- Fortinet FortiOS 8.0.0, 7.6.4 through 7.6.6

## References

- [https://fortiguard.fortinet.com/psirt/FG-IR-26-181](https://fortiguard.fortinet.com/psirt/FG-IR-26-181)

## Related threats

- [Fortinet FortiOS authentication bypass in HA command execution](https://junglewise.ai/threats/cve-2026-126259-a-missing-authentication-for-critical-function-vulnerability-in)
- [Fortinet FortiOS stack buffer overflow in WAD proxy](https://junglewise.ai/threats/cve-2026-126258-a-stack-based-buffer-overflow-vulnerability-in-fortinet-fortios)
- [Fortinet FortiOS out-of-bounds read in kernel](https://junglewise.ai/threats/cve-2026-126256-a-out-of-bounds-read-vulnerability-in-fortinet-fortios-8-0-0)
- [Fortinet FortiOS path traversal authentication bypass in SSH daemon](https://junglewise.ai/threats/cve-2026-126255-a-path-traversal-filedir-vulnerability-in-fortinet-fortios-8-0-0)
- [Fortinet FortiOS numeric truncation error in BGP daemon](https://junglewise.ai/threats/cve-2026-126254-a-numeric-truncation-error-vulnerability-in-fortinet-fortios-8-0)