FG-IR-26-168

Critical Fortinet FortiPAM Authentication Bypass Flaw Enables Remote Session Hijacking and Traffic Proxying CVE-2026-84388

Fortinet releases emergency fixes for critical CVSS 9.6 flaw CVE-2026-84388 in FortiPAM and its Chrome Extension, allowing remote attackers to hijack administrative sessions.