CRITICAL 9.6 NVD

CVE-2026-84388

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all v

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-168

Published: 2026-09-22 · Source: NVD · Feed updated: 2026-09-22

This critical severity vulnerability with a CVSS score of 9.6 was published on 2026-09-22 via NVD.

Risk Timeline

CVE Disclosed2026-09-22 · -1 days ago

Remediation Resources

Analysis & PoC

fortiguard.fortinet.com/psirt/FG-IR-26-168

vulnfeed aggregates 14151 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.