CVE-2026-59838
Medium · 5.9CVSS
5.9
EPSS
0.2%
Published
Jul 15, 2026
CISA due date
—
The record
A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7.2.6, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-62057 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)… CWE-80
- CVE-2026-52710 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)… CWE-80
- CVE-2026-119479 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)… CWE-80
- CVE-2026-42694 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)… CWE-80
- CVE-2026-48202 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)… CWE-80
- CVE-2026-25467 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)… CWE-80
- CVE-2026-116402 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)… CWE-80
- CVE-2026-10511 The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… CWE-80