VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Jul 15, 2026· Updated Jul 15, 2026

CVE-2026-59838

CVE-2026-59838

Description

A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7.2.6, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions may allow attacker to execute unauthorized code or commands via

Affected products

3
  • Fortinet/FortiSIEMllm-fuzzy3 versions
    7.4.0, 7.3.0-7.3.4, 7.2.0-7.2.6, 7.1, 7.0, 6.7, 6.6, 6.5, 6.4+ 2 more
    • (no CPE)range: 7.4.0, 7.3.0-7.3.4, 7.2.0-7.2.6, 7.1, 7.0, 6.7, 6.6, 6.5, 6.4
    • cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*range: >=6.4.0,<7.2.7
    • cpe:2.3:a:fortinet:fortisiem:7.4.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.