← Back

CVE-2026-59839

nvd nist
Published: Jul 14, 2026Modified: Jul 15, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Exploitability: 0.3 / Impact: 5.2
Source: psirt@fortinet.com (Secondary)

Description

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0, FortiPAM 1.7.0 through 1.7.2, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

Affected (6)

Fortinet
3 products
Fortios
Fortipam
Fortiproxy
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Fortios
From 6.4.0 to 7.4.10
Fortios
From 7.6.0 to 7.6.7
Fortinet
Fortipam
From 1.0.0 to 1.7.3
Fortipam
Version 1.8.0
Fortinet
Fortiproxy
From 7.0.0 to 7.4.14
Fortiproxy
From 7.6.0 to 7.6.6

Related CWEs

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (1)

Source: psirt@fortinet.com
Vendor Advisory

Timeline

No history available yet.