CVE-2026-84388
CVE-2026-84388
9.6
CriticalPublished:
Source:psirt@fortinet.com
Awaiting Analysis
Weakness (CWE)
CVSS Vector
v3.1- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- Required
- Scope
- Changed
- Confidentiality
- High
- Integrity
- High
- Availability
- Low
Description
A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack
References
psirt@fortinet.com
https://fortiguard.fortinet.com/psirt/FG-IR-26-168