CyberICT

CVE-2026-59839

Fortinet · Published July 14, 2026

CVSS v3.1

MEDIUM
Patch availableGet patch

Description

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0, FortiPAM 1.7.0 through 1.7.2, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

Affected Products

  • Fortiproxy < 7.4.14
  • Fortiproxy < 7.6.6
  • Fortios < 7.4.10
  • Fortios < 7.6.7

CVSS Vector

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H