CVE-2026-59839

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-59839
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0, FortiPAM 1.7.0 through 1.7.2, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.3 / Impact : 5.2

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://fortiguard.fortinet.com/psirt/FG-IR-26-151 Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-127084.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortipam:1.8.0:*:*:*:*:*:*:*
History

24 Oct 2026, 21:10

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad de limitación inadecuada de un nombre de ruta a un directorio restringido (’salto de ruta’) en Fortinet FortiOS 7.6.0 hasta 7.6.6, FortiOS 7.4.0 hasta 7.4.9, FortiOS 7.2 todas las versiones, FortiOS 7.0 todas las versiones, FortiOS 6.4 todas las versiones, FortiPAM 1.8.0, FortiPAM 1.7.0 hasta 1.7.2, FortiPAM 1.6 todas las versiones, FortiPAM 1.5 todas las versiones, FortiPAM 1.4 todas las versiones, FortiPAM 1.3 todas las versiones, FortiPAM 1.2 todas las versiones, FortiPAM 1.1 todas las versiones, FortiPAM 1.0 todas las versiones, FortiProxy 7.6.0 hasta 7.6.5, FortiProxy 7.4 hasta 7.4.13, FortiProxy 7.2 todas las versiones, FortiProxy 7.0 todas las versiones puede permitir al atacante ejecutar código o comandos no autorizados a través de <insertar vector de ataque aquí>
Information

Published : 2026-07-14 16:17

Updated : 2026-10-24 21:10

NVD link : CVE-2026-59839

Mitre link : CVE-2026-59839

CVE.ORG link : CVE-2026-59839

JSON object : View

Products Affected

fortinet

  • fortiproxy
  • fortipam
  • fortios
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')