fortinet fortios CVE-2026-59840 vulnerability in Fortinet Products
Published on July 14, 2026

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions may allow attacker to information disclosure via <insert attack vector here>

NVD

Vulnerability Analysis

CVE-2026-59840 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
LOW
Integrity Impact:
NONE
Availability Impact:
NONE

Weakness Type

Buffer Over-read

The software reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer. This typically occurs when the pointer or its index is incremented to a position beyond the bounds of the buffer or when pointer arithmetic results in a position outside of the valid memory location to name a few. This may result in exposure of sensitive information or possibly a crash.


Products Associated with CVE-2026-59840

Want to know whenever a new CVE is published for Fortinet products? stack.watch will email you.

Fortinet FortiOS
 
Fortinet Fortipam
 
Fortinet Fortiswitchmanager
 
Fortinet FortiProxy
 

Affected Versions

Fortinet FortiOS: Fortinet FortiPAM: Fortinet FortiSwitchManager: Fortinet FortiProxy: