CVE-2026-59839

Description

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0, FortiPAM 1.7.0 through 1.7.2, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

Traduire en français

Produits concernés

• Fortinet FortiProxy
• Fortinet FortiOS
• Fortinet FortiPAM
• Siemens RUGGEDCOM APE1808

Scores CVSS

Faiblesses (CWE)

• CWE-22

Références

• https://fortiguard.fortinet.com/psirt/FG-IR-26-151 Vendor Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-127084.html

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories