Is CVE-2026-59840 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-59840?

CVE-2026-59840 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-59840

Description

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions may allow attacker to information disclosure via <insert attack vector here>