CVE-2026-59838

A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7.2.6, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

Score
CVSS 3.1 5.9 Medium
Status
Analyzed - psirt@fortinet.com
Published
2026-07-15
Last modified
2026-10-24
Weaknesses
CWE-80

Affected products

References

 
 
© AVABIS GmbH privacypolicy about