CVE-2026-59838

medium Fortinet
CVSS v3 Base Score
5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
Required
Confidentiality
Low
Integrity
Low
Availability
Low
Published: July 15, 2026 (53 days ago)
Last Modified: July 15, 2026
Vendor: Fortinet
Source: NVD

Description

A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7.2.6, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

CWE

CWE-80

Affected Products

fortinet fortisiem

References

🔗 fortiguard.fortinet.com