Stack Buffer Overflow in Log Report

unknownCVE-2026-59837

CVSSv3 Score: 5.9 A Stack-based Buffer Overflow vulnerability [CWE-121] in FortiOS, FortiProxy and FortiPAM may allow a privileged authenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands via crafted HTTP requests. Revised on 2026-07-14 00:00:00

CSIRTS triage

vendor: Fortinet product: FortiOS, FortiProxy, FortiPAM Remote code execution

What: A privileged authenticated attacker may execute arbitrary code or commands via crafted HTTP requests.
Who is affected: Privileged authenticated users of FortiOS, FortiProxy, and FortiPAM.
Urgency: Remediation is urgent due to the potential for remote code execution.
Action: Update to the latest versions of FortiOS, FortiProxy, and FortiPAM.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch FortiOS, FortiProxy, FortiPAM

Get an email when a new FortiOS, FortiProxy, FortiPAM advisory drops — max one per day, one-click unsubscribe.

Details

Source: Fortinet FortiGuard PSIRT (INTL · vendor-psirt · site)
Severity: unknown
Published: 2026-07-14
Exploitation: Not in CISA KEV at last sync

Original advisory: https://fortiguard.fortinet.com/psirt/FG-IR-26-148

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-598370.58% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 44% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-59837	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

medium[NEW] [medium] Fortinet FortiOS and FortiProxy: Multiple vulnerabilitiescert-bund
unknownMultiple vulnerabilities in Fortinet products (July 15, 2026)cert-fr-avis
mediumCVE-2026-59837: A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7…nvd

Recent advisories for Stack Buffer Overflow

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

criticalCVE-2026-67822: Tenda W6-S 1.0.0.4(510) contains a stack-based buffer overflow vulnerability in the /goform/wi…nvd · 2026-07-31
highCVE-2026-15722: A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruveleme…nvd · 2026-07-31
unknownCVE-2026-67248: A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vul…nvd · 2026-07-30
mediumCVE-2026-13309: Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulne…nvd · 2026-07-29
highCVE-2026-5056: GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnera…nvd · 2026-07-29
unknownCVE-2026-12935: The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that c…nvd · 2026-07-29