{"vulnerability": "cve-2026-84388", "sightings": [{"uuid": "97ae6b0f-94f3-491f-8647-cd91f7390a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mv7ryeh2zy2m", "content": "Daily IT Security Digest \u2014 2026-09-11\n(infosec.exchange) #infosec\n\n---\n\n## 7. Fortinet: 10 Vulnerabilities Patched, 2 Critical Authentication Bypasses\nFortinet patched 10 vulnerabilities across its product line, notably CVE-2026-84390 and CVE-2026-84388 \u2014 both critical flaws allowing unauthenticated", "creation_timestamp": "2026-09-11T05:02:12.027533Z"}, {"uuid": "76f4395c-2e1f-4442-90dd-75c251fba449", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvaprcwds62r", "content": "\ud83d\udd17 CVE : CVE-2026-22575, CVE-2026-26084, CVE-2026-84385, CVE-2026-84386, CVE-2026-84387, CVE-2026-84388, CVE-2026-84389, CVE-2026-84390, CVE-2026-84391, CVE-2026-84392, CVE-2026-84393", "creation_timestamp": "2026-09-11T13:55:10.462324Z"}, {"uuid": "24dbdaaa-8c65-4cd2-9749-eb9a5e93691f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-prodotti-fortinet-3", "content": "", "creation_timestamp": "2026-09-16T08:45:07.574181Z"}, {"uuid": "9a8bf75a-a776-4d89-913f-b43a0e197466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw4jne6jni2g", "content": "CVE-2026-84388 - fortipam chrome extension\nThe FortiPAM browser add\u2011on for Chrome may let an unauthenticated remote user view information that should be private. This occurs because the extension does not properly\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#fortinet #CVE #infosec", "creation_timestamp": "2026-09-22T15:20:04.672614Z"}, {"uuid": "88447552-4bb5-463a-b968-550c0a010fc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw4mcxkari2t", "content": "\ud83d\udea8 CVE-2026-84388 \u2014 CVSS 9.6 CRITICAL\n\nA improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84388\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T16:07:56.831388Z"}, {"uuid": "97787a9e-4669-40ef-a764-1bf1adfb5294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117315966324892984", "content": "New advisory\nCRITICAL: CVE-2026-84388: Fortinet Fortipam Chrome Extension:  https://app.opencve.io/cve/?vendor=fortinet&product=fortipam_chrome_extension  #Fortinet #Chrome #infosec #vulnerability", "creation_timestamp": "2026-09-22T17:53:04.291174Z"}, {"uuid": "102d6c92-4ec7-42a5-ac6c-3796fd917799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "https://t.me/GithubRedTeam/103054", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-84388-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ShadowForge-Cyber\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-22 16:30:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nImproper Restriction of Rendered UI Layers or Frames (CWE-1021)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-22T17:00:09.000000Z"}, {"uuid": "d5accbdf-9421-4d76-958c-48c812dda6d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/103054", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-84388-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ShadowForge-Cyber\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-22 16:30:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nImproper Restriction of Rendered UI Layers or Frames (CWE-1021)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-22T17:00:09.000000Z"}, {"uuid": "953a014f-812e-4d75-b2e3-8559faf573b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "Telegram/baeiM9fRMd5lQ2ZvmOQ70_pifu-s1kWTpwT4Ot-GKiqZMMo", "content": "", "creation_timestamp": "2026-09-23T03:00:06.000000Z"}, {"uuid": "bbf984fb-f9ab-43a7-a745-470fa5c2e07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "published-proof-of-concept", "source": "Telegram/baeiM9fRMd5lQ2ZvmOQ70_pifu-s1kWTpwT4Ot-GKiqZMMo", "content": "", "creation_timestamp": "2026-09-23T03:00:06.000000Z"}, {"uuid": "34cb5498-c6ee-4bb0-80db-77c4ee41ba7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84388", "type": "seen", "source": "https://infosec.exchange/users/AAKL/statuses/117349707661619057", "content": "Fortinet posted a critical vulnerability yesterday: CVE-2026-84388 - Improper Restriction of Rendered UI Layers or Frames in FortiPAM Chrome Extension Enables Remote Information Disclosure https://app.opencve.io/cve/CVE-2026-84388 #infosec #Fortinet #Chrome #vulnerability", "creation_timestamp": "2026-09-28T16:53:56.639909Z"}]}