An improper locking vulnerability exists in Fortinet FortiOS versions 8.0.0 and 7.6.4 through 7.6.6. This flaw may allow an unauthenticated attacker with network access to cause a denial of service (DoS) on the HTTPS management interface by sending crafted HTTP requests.