CVE-2026-59841
published 2026-07-14CVE-2026-59841: A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to…
PriorityP341high7.5CVSS 3.1
AVAACHPRNUINSUCHIHAH
EPSS
0.24%
13.6th percentile
A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | fortinet | — | — |
| fortinet | fortisiem | — | — |
| fortinet | fortisiem | >= 7.4.0 < 7.4.2 | 7.4.2 |
| fortinet | fortisiemwindowsagent | — | — |
| fortinet | fortisiemwindowsagent | 7.4.0 – 7.4.1 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via <insert atta
ghsa_unreviewed·2026-07-14
CVE-2026-59841 [HIGH] CWE-923 A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via <insert atta
A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via
Fortinet
Supers override fails to properly override supervisor address
vendor_fortinet·2026-07-14·CVSS 7.5
CVE-2026-59841 [HIGH] CWE-923 Supers override fails to properly override supervisor address
FG-IR-26-155: Supers override fails to properly override supervisor address
A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via
CVEs: CVE-2026-59841
CWEs: CWE-923
CVSS: 7.5 (high)
Affected products: FortiSIEM, FortiSIEMWindowsAgent, Fortinet
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-14
Published