CVE-2026-59837

6.6 Moyenne

Publiée le 14/07/2026 à 18:17 · Modifiée le 11/08/2026 à 15:19 · Modifiée · Source : psirt@fortinet.com

Description

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions may allow a privileged authenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands via crafted HTTP requests.

Traduire en français

Produits concernés

Fortinet FortiPAM
Fortinet FortiSASE
Fortinet FortiProxy
Fortinet FortiOS
Siemens RUGGEDCOM APE1808

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.6 Moyenne	psirt@fortinet.com	`CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-121

Références

https://fortiguard.fortinet.com/psirt/FG-IR-26-148 Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-864900.html

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories