by Kastro
Paper/Archive/CVE-2026-84388

CVE-2026-84388

Fortinet FortiPAM Chrome Extension — A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chr…

EPSS 0.4%CVSS 9.1
critical.is priorityof 100
34
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 31.7.317 × 206.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack

Affected

ProductAffectedFixed inSource
FortiPAM Chrome Extension8.0.1–CNA

Scores by source

fortinet (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L/E:P/RL:O/RC:C
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

reffortiguard.fortinet.com/psirt/FG-IR-26-168