CVE-2026-59841

HIGH CVSS 3.1: 7.5 EPSS 0.15%
Updated Jul 15, 2026
Fortinet
Parameter Value
CVSS 7.5 (HIGH)
Affected Versions 7.4.0 — 7.4.2
Fixed In 7.4.2
Type CWE-923
Vendor Fortinet
Public PoC No

A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via <insert attack vector here>

Attack Parameters

Attack Vector
Adjacent
Requires local network access
Attack Complexity
High
Difficult to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service

CVSS Vector v3.1

Weakness Type (CWE)

Vulnerable Products 2

Configuration From (including) Up to (excluding)
Fortinet Fortisiem
cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*
7.4.0 7.4.2
Microsoft Windows
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*