CVE-2026-59836 | A improper certificate validation vulnerability in Fortinet … | CVSS 6.7 MEDIUM

Description

A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attacker to information disclosure via <insert attack vector here>

Metadata

CVE ID: CVE-2026-59836
State: PUBLISHED
Assigner: fortinet
Reserved: 2026-07-07 15:21 UTC
Published: 2026-07-14 15:15 UTC
Last updated: 2026-07-14 16:03 UTC
Primary CWE: CWE-295
Information disclosure
Vendor / Product: Fortinet / FortiClientEMS
Sources: cve.org · NVD

Severity & Metrics

6.7 MEDIUM CVSS 3.1

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

SSVC — CISA Coordinator

Exploitation: none
Automatable: no
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
Fortinet	FortiClientEMS	—	7.4.3 ≤ 7.4.5, 7.4.0 ≤ 7.4.1, 7.2.12 ≤ 7.2.14, 7.2.0 ≤ 7.2.10

Weakness (CWE)

CWE	Source	Description
CWE-295	cna	Information disclosure

CVSS scores (1)

Score	Severity	Version	Source	Vector
6.7	MEDIUM	3.1	cna	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

References (1)

https://fortiguard.fortinet.com/psirt/FG-IR-26-147 https://fortiguard.fortinet.com/psirt/FG-IR-26-147