CVE-2026-59839

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0, FortiPAM 1.7.0 through 1.7.2, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortipam:1.8.0:*:*:*:*:*:*:*

History

15 Jul 2026, 14:48

Type Values Removed Values Added
CPE cpe:2.3:o:fortinet:fortipam:1.8.0:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*
References () https://fortiguard.fortinet.com/psirt/FG-IR-26-151 - () https://fortiguard.fortinet.com/psirt/FG-IR-26-151 - Vendor Advisory
First Time Fortinet fortios
Fortinet fortipam
Fortinet fortiproxy
Fortinet

14 Jul 2026, 16:17

Type Values Removed Values Added
New CVE

Information

Published : 2026-07-14 16:17

Updated : 2026-07-15 14:48


NVD link : CVE-2026-59839

Mitre link : CVE-2026-59839

CVE.ORG link : CVE-2026-59839


JSON object : View

Products Affected

fortinet

  • fortios
  • fortiproxy
  • fortipam
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')