A null pointer dereference vulnerability exists in Fortinet FortiAuthenticator versions 8.0.0 through 8.0.3 and 6.6.0 through 6.6.10. This flaw may allow an unauthenticated attacker to cause a denial of service (DoS) by sending crafted HTTP requests. The vulnerability does not impact confidentiality or integrity but results in service disruption.