CVE-2026-84388

CRITICAL CVSS 9.6 View on NVD ↗

Description

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-168

Published: Sep 22, 2026 15:17 UTC Modified: Sep 22, 2026 19:09 UTC