CVE-2026-59839

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.6.0 through 7.6.6 FortiOS versions 7.4.0 through 7.4.9 FortiOS version 7.2 FortiOS version 7.0 FortiOS version 6.4 FortiPAM version 1.8.0 FortiPAM versions 1.7.0 through 1.7.2 FortiPAM version 1.6 FortiPAM version 1.5 FortiPAM version 1.4 FortiPAM version 1.3 FortiPAM version 1.2 FortiPAM version 1.1 FortiPAM version 1.0 FortiProxy versions 7.6.0 through 7.6.5 FortiProxy versions 7.4 through 7.4.13 FortiProxy version 7.2 FortiProxy version 7.0

Description A path traversal issue exists where improper limitation of a pathname to a restricted directory may allow an attacker to execute unauthorized code or commands. Path traversal is a technique used to access files and directories that are stored outside the web root folder. There have been reports of elevated activities targeting these products.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.