CVE-2026-84388

9.6 criticalEPSS 0.4%

Critical (9.6). EPSS 0.4% chance of exploitation in the next 30 days.

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack

Severity

CVSS 3.1

9.6 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWE: CWE-1021
Published: 2026-09-22
Modified: 2026-09-27
Record from: the NVD, synced 2026-10-19

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-168

Check your stack JSON