CVE-2021-36174: Fortinet Fortiportal

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

A memory allocation with excessive size value vulnerability in the license verification function of FortiPortal before 6.0.6 may allow an attacker to perform a denial of service attack via specially crafted license blobs.

Affected products

• Fortinet Fortiportal: from 4.0.0, before 6.0.6 (fixed in 6.0.6)

Published 2021-11-02. Last modified 2026-06-17.