CVE-2026-84388

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack

  • Published Sep 22, 2026
  • CVSS 9.6 critical
  • 0.4% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-84388 at the National Vulnerability Database