CVEvulnerability
CVE-2026-59840
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2026-07-14
- Last modified
- 2026-10-24
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-126
Description
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to information disclosure via <insert attack vector here>
Affected configurations
• fortinet fortiproxy (>= 7.2.0 < 7.4.14)
• fortinet fortiproxy (>= 7.6.0 < 7.6.6)
• fortinet fortios (>= 7.2.0 < 7.4.9)
• fortinet fortios (>= 7.6.0 <= 7.6.2)
Related
Weakness · CWE (1)
- CWE-126 Buffer Over-read weakness
References
- https://fortiguard.fortinet.com/psirt/FG-IR-26-154 Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-864900.html cert-portal.siemens.com