CVE-2026-59838

Analyzed Analyzed - Analysis Complete

Basic XSS in Fortinet FortiSIEM

Publication date: 2026-07-15

Last updated on: 2026-07-15

Assigner: Fortinet, Inc.

Description

A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7.2.6, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-15

Last Modified

2026-07-15

Generated

2026-08-04

AI Q&A

2026-07-16

EPSS Evaluated

2026-08-03

NVD

CVE-2026-59838

EUVD

EUVD-2026-44668

Affected Vendors & Products

Vendor	Product	Version / Range
fortinet	fortisiem	From 7.3.0 (inc) to 7.3.5 (exc)
fortinet	fortisiem	7.4.0
fortinet	fortisiem	From 6.4.0 (inc) to 7.2.7 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-80	The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages.

Attack-Flow Graph

Executive Summary

This is a cross-site scripting (XSS) vulnerability in Fortinet FortiSIEM versions 7.4.0, 7.3.0 through 7.3.4, 7.2.0 through 7.2.6, and all versions of 7.1, 7.0, 6.7, 6.6, 6.5, and 6.4. It allows improper neutralization of script-related HTML tags, potentially enabling attackers to inject and execute unauthorized code or commands.

Detection Guidance

This vulnerability is a basic XSS issue in FortiSIEM versions 7.4.0, 7.3.0-7.3.4, 7.2.0-7.2.6, and older versions. Detection typically involves checking web application inputs for improperly neutralized HTML tags or script injection attempts. Use tools like Burp Suite or OWASP ZAP to scan for XSS vulnerabilities in FortiSIEM web interfaces. Monitor web server logs for unusual script tags or payloads such as <script>, <img src=x onerror=>, or other HTML injection attempts.

Impact Analysis

An attacker could exploit this to execute malicious scripts in your browser, steal session cookies, redirect you to phishing sites, or perform actions on your behalf without your knowledge. It may lead to unauthorized data access or manipulation.

Compliance Impact

This vulnerability could result in unauthorized data access or disclosure, violating GDPR's data protection principles or HIPAA's security requirements. Organizations may face compliance penalties if exploited.

Mitigation Strategies

Apply the latest security patches from Fortinet for affected FortiSIEM versions. Disable unnecessary user input fields in web interfaces. Implement input validation and output encoding for user-supplied data. Monitor network traffic for suspicious XSS patterns.

Hi! I’m here to help you understand CVE-2026-59838. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70