FortinetCVE-2026-84388
Fortinet FortiPAM Chrome Extension: information disclosure
Critical9.6CVE-2026-84388 · Published Sep 22, 2026
A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| FortiPAM Chrome Extension Product | <= 8.0.1 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-1021
More Fortinet advisories
All Fortinet| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 11 | Fortinet FortiMonitorOnSight: information disclosure | Critical9.8 | No fix yet |
| Sep 8 | Fortinet FortiSOAR PaaS: improper access control | Medium5.4 | No fix yet |
| Sep 8 | Fortinet FortiClientWindows: improper access control | Medium5.1 | No fix yet |
| Sep 8 | Fortinet FortiSandbox: command injection | High7.2 | No fix yet |
| Sep 8 | Fortinet FortiSIEM: open redirect | Low3.1 | No fix yet |
| Sep 8 | Fortinet FortiAnalyzer: denial of service | Medium6.5 | No fix yet |