CVE-2026-59840

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions may allow attacker to information disclosure via <insert attack vector here>

Scoring

Severity

MEDIUM

CVSS base score

4.1

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C

EPSS probability

0.31%

CWE

CWE-126

Published

2026-07-14

Last modified

2026-08-11

Affected products

• Fortinet FortiOS
• Fortinet FortiOS
• Fortinet FortiOS
• Fortinet FortiOS
• Fortinet FortiOS
• Fortinet FortiPAM
• Fortinet FortiPAM
• Fortinet FortiPAM

Weakness type

• CWE-126

Related vulnerabilities

• CVE-2026-83949 — Microsoft Office Word Information Disclosure Vulnerability
• CVE-2026-83951 — Microsoft Office Word Information Disclosure Vulnerability
• CVE-2026-81399 — Microsoft Excel Information Disclosure Vulnerability
• CVE-2026-78516 — Windows Storage Information Disclosure Vulnerability
• CVE-2026-72974 — Microsoft Office Excel Information Disclosure Vulnerability
• CVE-2026-69626 — Microsoft Office Information Disclosure Vulnerability
• CVE-2026-72932 — Windows Message Queuing Queue Manager Information Disclosure Vulnerability
• CVE-2026-69794 — Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Markdown version · Browse all CVEs