CVE-2026-59840

EPSS 0.19%
Veröffentlicht 14.07.2026 15:19:51
Zuletzt bearbeitet 11.08.2026 13:19:01
Erkennungen
Login

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to information disclosure via <insert attack vector here>

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

NVD 4 VulnDex Vulnerability Enrichment 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Fortinet ≫ FortiProxy Version >= 7.2.0 < 7.4.14

Fortinet ≫ FortiProxy Version >= 7.6.0 < 7.6.6

Fortinet ≫ FortiOS Version >= 7.2.0 < 7.4.9

Fortinet ≫ FortiOS Version >= 7.6.0 <= 7.6.2

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.19%	0.086

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Fortinet	4.3	2.8	1.4	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-126 Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

https://cert-portal.siemens.com/productcert/html/ssa-864900.html

https://fortiguard.fortinet.com/psirt/FG-IR-26-154

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-59840

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-59840

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-59840

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-59840