Fortinet Security Updates – 15 July 2026

The addressed vulnerabilities could allow the attackers to obtain sensitive information, gain elevated privileges, or execute unauthorized code or commands on the affected systems.

Sample of the addressed vulnerabilities:

1. Fortinet FortiSandbox Unauthenticated VNC Access Vulnerability (CVE-2026-59835):

• CVSS: 7.7
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Obtain Information

2. Fortinet FortiSIEM Improper Restriction Of Communication Channel To Intended Endpoints (CVE-2026-59841):

• CVSS: 6.9
• Attack Vector: Adjacent
• Attack Complexity: High
• Privileges Required: None
• User Interaction: None
• Consequences: Gain Privileges

The affected products:

• FortiSandbox.
• FortiSIEMWindowsAgent.
• FortiAuthenticator.
• FortiOS.
• FortiPAM.
• FortiProxy.
• FortiClientEMS.
• FortiSIEM.