An allocation of resources without limits or throttling [CWE-770] vulnerability in FortiOS versions 7.6.0, versions 7.4.4 through 7.4.0, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow a remote unauthenticated attacker to prevent access to the GUI via specially crafted requests directed at specific endpoints.
https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-06
https://thehackernews.com/2025/02/ivanti-patches-critical-flaws-in.html