# CVE-2026-59840

## Summary

- **CVE ID:** CVE-2026-59840
- **Severity:** MEDIUM
- **CVSS Score:** 4.1 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C)
- **CWE:** CWE-126
- **Published:** Jul 14, 2026
- **Last Modified:** Aug 11, 2026

## Description

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions may allow attacker to information disclosure via <insert attack vector here>

## Affected Products

- Fortinet — FortiOS (7.6.0)
- Fortinet — FortiOS (7.4.0)
- Fortinet — FortiOS (7.2.0)
- Fortinet — FortiOS (7.0.0)
- Fortinet — FortiOS (6.4.0)
- Fortinet — FortiPAM (1.7.0)
- Fortinet — FortiPAM (1.6.0)
- Fortinet — FortiPAM (1.5.0)
- Fortinet — FortiPAM (1.4.0)
- Fortinet — FortiPAM (1.3.0)
- Fortinet — FortiPAM (1.2.0)
- Fortinet — FortiPAM (1.1.0)
- Fortinet — FortiPAM (1.0.0)
- Fortinet — FortiSwitchManager (7.2.0)
- Fortinet — FortiSwitchManager (7.0.0)
- Fortinet — FortiProxy (7.6.0)
- Fortinet — FortiProxy (7.4.0)
- Fortinet — FortiProxy (7.2.0)
- Fortinet — FortiProxy (7.0.0)

## References

- [CNA](https://fortiguard.fortinet.com/psirt/FG-IR-26-154)
- [siemens-SADP](https://cert-portal.siemens.com/productcert/html/ssa-864900.html)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.31%
- **EPSS Percentile:** 24.0

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._