CVE-2026-84385

A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow attacker to escalation of privilege via <insert attack vector here>

Score

CVSS 3.1 5.4 Medium

Status

Awaiting Analysis - psirt@fortinet.com

Published

2026-09-08

Last modified

2026-09-10

Weaknesses

CWE-284

Affected products

• Fortisoaron-premise (Fortinet)
• Fortisoarpaas (Fortinet)

References

• https://fortiguard.fortinet.com/psirt/FG-IR-26-164