CVE-2026-84388
Last modified
CVE-2026-84388 is a critical-severity vulnerability rated 9.6/10 on the CVSS scale. A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack. EPSS estimates a 0.38% chance of exploitation in the next 30 days.
Description
A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiPAM Chrome Extension | 8.0.1 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-84388?
How severe is CVE-2026-84388?
How do I fix CVE-2026-84388?
How Strix Helps
- One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-84382HTTPX2 is a next generation HTTP client for Python. Prior to…7.5
- CVE-2026-84383libheif is a HEIF and AVIF file format decoder and encoder. …9.8
- CVE-2026-84384libheif is a HEIF and AVIF file format decoder and encoder. …7.5
- CVE-2026-84385A improper access control vulnerability in Fortinet FortiSOA…5.4
- CVE-2026-84386A unverified ownership vulnerability in Fortinet FortiClient…5.1
- CVE-2026-84387A improper neutralization of special elements used in a comm…7.2
- CVE-2026-84389A url redirection to untrusted site ('open redirect') vulner…3.1
- CVE-2026-84390A inclusion of sensitive information in source code vulnerab…9.8
- CVE-2026-84391A use of uninitialized variable vulnerability in Fortinet Fo…6.5
- CVE-2026-84392A NULL Pointer Dereference vulnerability [CWE-476] vulnerabi…2.7
- CVE-2026-84393A improper validation of certificate with host mismatch vuln…8.1
- CVE-2026-84394fast-uri accepts a host that contains an unbalanced or mispl…7.5
Are you affected by CVE-2026-84388?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST