CVEvulnerability

CVE-2026-59837

6.6 MEDIUM Published 2026-07-14 Modified 2026-10-29 Official page ↗
Status
Modified
Published
2026-07-14
Last modified
2026-10-29
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.6 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-121

Description

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions may allow a privileged authenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands via crafted HTTP requests.

Affected configurations

• fortinet fortiproxy (>= 7.2.0 < 7.4.14) • fortinet fortios (>= 7.2.0 < 7.4.2) • fortinet fortipam (>= 1.0.0 < 1.8.3)

Related

Weakness · CWE (1)

  • CWE-121 Stack-based Buffer Overflow weakness

References