{"id":"CVE-2026-59839","title":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all vers…","summary":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all vers…","severity":"medium","cvss":5,"cvssVector":"CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C","cvssSource":"cna","cwe":["CWE-22"],"vendor":"Fortinet","product":"FortiProxy","affected":["FortiProxy >= 7.6.0 <= 7.6.5","FortiProxy >= 7.4.0 <= 7.4.13","FortiProxy >= 7.2.0 <= 7.2.16","FortiProxy >= 7.0.0 <= 7.0.23","FortiOS >= 7.6.0 <= 7.6.6","FortiOS >= 7.4.0 <= 7.4.9","FortiOS >= 7.2.0 <= 7.2.13","FortiOS >= 7.0.0 <= 7.0.19","FortiOS >= 6.4.0 <= 6.4.16","FortiPAM 1.8.0","FortiPAM >= 1.7.0 <= 1.7.2","FortiPAM >= 1.6.0 <= 1.6.2","FortiPAM >= 1.5.0 <= 1.5.1","FortiPAM >= 1.4.0 <= 1.4.3","FortiPAM >= 1.3.0 <= 1.3.1","FortiPAM 1.2.0","FortiPAM >= 1.1.0 <= 1.1.2","FortiPAM >= 1.0.0 <= 1.0.3"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-07-14T16:02:03.651467Z"},"published":"2026-07-14","updated":"2026-10-15","sourceUpdated":"2026-10-15T01:23:29.471Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-59839","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-151","label":"https://fortiguard.fortinet.com/psirt/FG-IR-26-151"}],"tags":["cve.org"],"epss":0.00251,"epssPercentile":0.15324,"ingestedAt":"2026-10-15T05:52:45.993Z","slug":"CVE-2026-59839","body":"## Overview\n\nA improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0, FortiPAM 1.7.0 through 1.7.2, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>\n\n## Affected\n\n- `FortiProxy >= 7.6.0 <= 7.6.5`\n- `FortiProxy >= 7.4.0 <= 7.4.13`\n- `FortiProxy >= 7.2.0 <= 7.2.16`\n- `FortiProxy >= 7.0.0 <= 7.0.23`\n- `FortiOS >= 7.6.0 <= 7.6.6`\n- `FortiOS >= 7.4.0 <= 7.4.9`\n- `FortiOS >= 7.2.0 <= 7.2.13`\n- `FortiOS >= 7.0.0 <= 7.0.19`\n- `FortiOS >= 6.4.0 <= 6.4.16`\n- `FortiPAM 1.8.0`\n- `FortiPAM >= 1.7.0 <= 1.7.2`\n- `FortiPAM >= 1.6.0 <= 1.6.2`\n- `FortiPAM >= 1.5.0 <= 1.5.1`\n- `FortiPAM >= 1.4.0 <= 1.4.3`\n- `FortiPAM >= 1.3.0 <= 1.3.1`\n- `FortiPAM 1.2.0`\n- `FortiPAM >= 1.1.0 <= 1.1.2`\n- `FortiPAM >= 1.0.0 <= 1.0.3`\n\n## Remediation\n\nUpgrade to FortiProxy version 7.6.6 or above\nUpgrade to FortiOS version 8.0.0 or above\nUpgrade to FortiOS version 7.6.7 or above\nUpgrade to FortiOS version 7.4.10 or above\nFortinet remediated this issue in FortiSASE version 26.1.1 and hence customers do not need to perform any action.\nUpgrade to FortiPAM version 1.9.0 or above\nUpgrade to FortiPAM version 1.8.1 or above\nUpgrade to FortiSwitchManager version 7.2.8 or above","depth":"sunlit","depthScore":28,"depthScoreParts":{"impact":27.5,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}