CVE-2026-84388

critical

Description

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack

References

https://www.securityweek.com/fortinet-patches-critical-vulnerabilities-in-fortimonitoronsight-chrome-extension/

https://fortiguard.fortinet.com/psirt/FG-IR-26-168

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-84423

Details

Source: Mitre, NVD

Published: 2026-09-22

Updated: 2026-09-27

Risk Information

CVSS v2

Base Score: 9.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:P

Severity: High

CVSS v3

Base Score: 9.6

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

Severity: Critical

EPSS

EPSS: 0.00378