> Authentication Lockout Bypass via Race Condition
[DATE: 10/03/2026 07:00]
[LANGUAGE: EN]
CVSSv3 Score:
3.4
An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiManager and FortiAnalyzer may allow an attacker to bypass bruteforce protections via exploitation of race conditions.
Revised on 2026-03-10 00:00:00