Vulnerability intelligence
CVE-2026-84388
A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack
CVSS Score
9.1
Critical
EPSS — Exploit Probability
0.4%
Riskier than 31% of all CVEs · checked 2026-10-24
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
Unconfirmed
Vendor fix published
1 article across 1 outlet · first covered Sep 9, 2026 · latest Sep 9, 2026
Coverage timeline
RSS-
Fortinet Patches Critical Flaws Enabling JWT Bypass and Traffic Hijackingwww.securityweek.com · Sep 9, 2026