CVE-2026-84393

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-08 · updated 2026-10-15
Weakness: CWE-297

Description

A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via <insert attack vector here>

Affected products

Fortinet FortiOS (FortiGate): from 7.6.1 through 7.6.6
Fortinet FortiProxy: from 7.6.2 through 7.6.6

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-174
https://cert-portal.siemens.com/productcert/html/ssa-127084.html

Get alerted when CVE-2026-84393 or the next vulnerability affects your stack