AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

FortinetCVE-2026-59838

Fortinet FortiSIEM: cross-site scripting

Fortinet

CVE-2026-59838 · Published Jul 15, 2026

Medium5.9
No fix yet
Fortinet advisory

A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7.2.6, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

Affected versions

PackageAffectedFixed in
FortiSIEM
Product
<= 7.4.0No fix yet
>= 7.3.0, <= 7.3.4No fix yet
>= 7.2.0, <= 7.2.6No fix yet
>= 7.1.0, <= 7.1.9No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-80

More Fortinet advisories

All Fortinet
Medium 5.5Jul 14Fortinet FortiOS: path traversalCVE-2026-59839no fix yetMedium 4.3Jul 14Fortinet FortiOS: information disclosureCVE-2026-59840no fix yetHigh 7.5Jul 14Fortinet FortiSIEMWindowsAgent: privilege escalationCVE-2026-59841no fix yetHigh 8.6Jul 14Fortinet FortiSandbox: unauthenticated attacker could access the VNC server of...CVE-2026-59835no fix yetHigh 7.5Jul 14Fortinet FortiClientEMS: improper certificate validationCVE-2026-59836no fix yetMedium 6.6Jul 14Fortinet FortiOS: stack buffer overflowCVE-2026-59837no fix yet