Vulnerabilities

CVSS

6.1 Medium

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Risk score

48.8

Published

2026-07-14

Status

Modified

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.8.0, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.3, FortiProxy 7.2.0 through 7.2.9 may allow an authenticated remote user to execute code or commands via crafted requests.

Weaknesses

CWE-79

Coverage 1

threat-intel

Siemens RUGGEDCOM APE1808

A CISA advisory, in collaboration with Siemens ProductCERT, highlights vulnerabilities in Siemens RUGGEDCOM APE1808 devices when used with Fortinet NGFW. These vulnerabilities, including Cross-Site Scripting and Path Tra…

CISA Advisories · Aug 12, 2026 High

CVE-2026-23573CVE-2026-59839GEindustrial control systemscwe-79cwe-22

All articles mentioning it

Advisories and references

• fortiguard.fortinet.com/psirt/FG-IR-26-150
• cert-portal.siemens.com/productcert/html/ssa-127084.html