CVE-2026-59837

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.4.0 through 7.4.1 FortiOS versions 7.2.x FortiPAM versions 1.0 through 1.8.2 FortiProxy versions 7.4.0 through 7.4.13 FortiProxy versions 7.2.x

Description A stack-based buffer overflow occurs when a privileged authenticated attacker sends crafted HTTP requests. This issue may allow the execution of arbitrary code or commands if the attacker can bypass Address Space Layout Randomization (ASLR), a security technique that randomly arranges the address space positions of key data areas of a process, and stack protection. Real-world activities targeting these products have been identified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.