VULNERABILITY INTELLIGENCE

CVE-2026-59839

CVSS score5.5 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2026-07-14
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Description

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0, FortiPAM 1.7.0 through 1.7.2, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

Weakness classification

  • psirt@fortinet.com: CWE-22

Primary references