CVE-2026-84388

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack

Affected

Fortinet · FortiPAM Chrome Extension

CVSS v3.1 FORTINET

9.6 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

EPSS

0.38% chance of exploitation in the next 30 days, 30th percentile

Published

2026-09-22

Updated

2026-09-26

Proof-of-concept exploits (1)

• ShadowForge-Cyber/CVE-2026-84388-POC0★ · 2026-09-22

References

• CVE Record
• NVD entry

Related

• CVE-2026-104286
• CVE-2026-12944
• CVE-2026-65660
• CVE-2026-76504