CVE-2026-84390

A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker to improper access control via <insert attack vector here>

  • Published Sep 11, 2026
  • CVSS 9.8 critical
  • 0.5% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-84390 at the National Vulnerability Database