CVE-2026-59838: XSS
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7.2.6, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Fortinet FortiSIEMto a version that resolves this vulnerability.Fixed in 7.2.7 - Upgrade
Upgrade
Fortinet FortiSIEMto a version that resolves this vulnerability.Fixed in 7.3.5 - Upgrade
Upgrade
Fortinet FortiSIEMto a version that resolves this vulnerability.Fixed in 7.4.1 - Upgrade
Upgrade
Fortinet FortiSIEMto a version that resolves this vulnerability.Fixed in 7.5.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-59838?
The severity of CVE-2026-59838 is classified as medium with a score of 5.3.
How do I fix CVE-2026-59838?
To fix CVE-2026-59838, users should upgrade Fortinet FortiSIEM to the latest version that addresses this vulnerability.
What systems are affected by CVE-2026-59838?
CVE-2026-59838 affects Fortinet FortiSIEM versions 7.4.0, 7.3.0 through 7.3.4, 7.2.0 through 7.2.6, as well as all versions of 7.1, 7.0, 6.7, and 6.6.
What type of vulnerability is CVE-2026-59838?
CVE-2026-59838 is classified as an improper neutralization of script-related HTML tags vulnerability, commonly known as a basic XSS.
What is the potential impact of CVE-2026-59838?
The potential impact of CVE-2026-59838 includes the ability for attackers to execute malicious scripts in the context of a user's browser, leading to data exposure or session hijacking.