CVE-2026-84393 | Vulnetix

CVE-2026-84393 PUBLISHED CVSS 7.3 HIGH

Reported by fortinet · Published September 8, 2026

A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via <insert attack vector here>

Risk Scores

CVSS 3.1

7.3

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Affected Products

Vendor	Product	Versions
Fortinet	FortiOS	7.6.1
Fortinet	FortiProxy	7.6.2
Fortinet	FortiProxy	7.6.2
Fortinet	FortiOS	7.6.1

Timeline

Sep 8, 2026 Coalition ESS Score
Sep 8, 2026 CVE Published
Sep 8, 2026 CVE Updated
Sep 9, 2026 Security Advisory

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-174

Open in Interactive Console →