---
id: CVE-2026-59839
title: >-
  A improper limitation of a pathname to a restricted directory ('path
  traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS
  7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions,
  FortiOS 6.4 all vers…
summary: >-
  A improper limitation of a pathname to a restricted directory ('path
  traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS
  7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions,
  FortiOS 6.4 all vers…
severity: medium
cvss: 5
cvssVector: 'CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C'
cvssSource: cna
cwe:
  - CWE-22
vendor: Fortinet
product: FortiProxy
affected:
  - FortiProxy >= 7.6.0 <= 7.6.5
  - FortiProxy >= 7.4.0 <= 7.4.13
  - FortiProxy >= 7.2.0 <= 7.2.16
  - FortiProxy >= 7.0.0 <= 7.0.23
  - FortiOS >= 7.6.0 <= 7.6.6
  - FortiOS >= 7.4.0 <= 7.4.9
  - FortiOS >= 7.2.0 <= 7.2.13
  - FortiOS >= 7.0.0 <= 7.0.19
  - FortiOS >= 6.4.0 <= 6.4.16
  - FortiPAM 1.8.0
  - FortiPAM >= 1.7.0 <= 1.7.2
  - FortiPAM >= 1.6.0 <= 1.6.2
  - FortiPAM >= 1.5.0 <= 1.5.1
  - FortiPAM >= 1.4.0 <= 1.4.3
  - FortiPAM >= 1.3.0 <= 1.3.1
  - FortiPAM 1.2.0
  - FortiPAM >= 1.1.0 <= 1.1.2
  - FortiPAM >= 1.0.0 <= 1.0.3
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-07-14T16:02:03.651467Z'
published: '2026-07-14'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:23:29.471Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-59839'
references:
  - url: 'https://fortiguard.fortinet.com/psirt/FG-IR-26-151'
    label: 'https://fortiguard.fortinet.com/psirt/FG-IR-26-151'
tags:
  - cve.org
epss: 0.00251
epssPercentile: 0.15324
ingestedAt: '2026-10-15T05:52:45.993Z'
---

## Overview

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0, FortiPAM 1.7.0 through 1.7.2, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

## Affected

- `FortiProxy >= 7.6.0 <= 7.6.5`
- `FortiProxy >= 7.4.0 <= 7.4.13`
- `FortiProxy >= 7.2.0 <= 7.2.16`
- `FortiProxy >= 7.0.0 <= 7.0.23`
- `FortiOS >= 7.6.0 <= 7.6.6`
- `FortiOS >= 7.4.0 <= 7.4.9`
- `FortiOS >= 7.2.0 <= 7.2.13`
- `FortiOS >= 7.0.0 <= 7.0.19`
- `FortiOS >= 6.4.0 <= 6.4.16`
- `FortiPAM 1.8.0`
- `FortiPAM >= 1.7.0 <= 1.7.2`
- `FortiPAM >= 1.6.0 <= 1.6.2`
- `FortiPAM >= 1.5.0 <= 1.5.1`
- `FortiPAM >= 1.4.0 <= 1.4.3`
- `FortiPAM >= 1.3.0 <= 1.3.1`
- `FortiPAM 1.2.0`
- `FortiPAM >= 1.1.0 <= 1.1.2`
- `FortiPAM >= 1.0.0 <= 1.0.3`

## Remediation

Upgrade to FortiProxy version 7.6.6 or above
Upgrade to FortiOS version 8.0.0 or above
Upgrade to FortiOS version 7.6.7 or above
Upgrade to FortiOS version 7.4.10 or above
Fortinet remediated this issue in FortiSASE version 26.1.1 and hence customers do not need to perform any action.
Upgrade to FortiPAM version 1.9.0 or above
Upgrade to FortiPAM version 1.8.1 or above
Upgrade to FortiSwitchManager version 7.2.8 or above