Information Disclosure Vulnerability in Fortinet FortiPAM Chrome Extension
CVE-2026-84388

9.1CRITICAL

Key Information:

Vendor

Fortinet
Status
Fortipam Chrome Extension
Vendor
CVE Published:
22 September 2026

What is CVE-2026-84388?

The Fortinet FortiPAM Chrome Extension contains a vulnerability that allows attackers to disclose sensitive information through improper restrictions on rendered user interface layers or frames. This issue affects all versions of the FortiPAM Chrome Extension in both 8.0 and 7.4 series, potentially allowing unauthorized users to exploit the vulnerability remotely without authentication. For further details, please visit the Fortinet advisory.

Affected Version(s)

FortiPAM Chrome Extension 8.0.1

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-168

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.