CVE-2026-84393Patch

LOWCVSS 8.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via <insert attack vector here>

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-297

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
9 mentions across 5 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 6 signals
Technical details provided in 7 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 4d ago at 4 mentions (2026-09-08); latest day: 2
9 total mentions across 5 days

Deep dive

Activity timeline9 mentions / 5d

Signal classification3 categories

Patch

555.6%

Disclosure

333.3%

General

111.1%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-08	4	Disclosure1Patch3
2026-09-09	1	General1
2026-09-10	1	Disclosure1
2026-09-14	1	Disclosure1
2026-09-16	2	Patch2

Full discourse9 posts

yousukezan@yousukezan46d
Patch
Fortinetは、FortiOSとFortiProxyのAgentless ZTNA portalに、認証なしの攻撃者がバックエンド通信を盗聴・改ざんできる証明書検証不備「CVE-2026-84393」があると公表した。 Fortinetによると、原因はCWE-295に分類される不適切な証明書検証で、ZTNA portalと接続先Webサイトの間にいる攻撃者が偽造または不一致の証明書を提示し、中間者攻撃を成立させられる。認証情報は不要で、セッション情報やアプリケーション内容などの漏えいにつながる可能性がある。影響するのはFortiOS 7.6.1〜7.6.6とFortiProxy 7.6.2〜7.6.6。FortiOSとFortiProxyの8.0、7.4、7.2系は影響を受けない。修正版は両製品とも7.6.7以降。Fortinetは該当する7.6系利用者に更新を推奨している。現時点でCVE-2026-84393の実悪用は確認されておらず、既知の悪用脆弱性にも指定されていない。 https://cybersecuritynews.com/fortios-and-fortiproxy-ztna-validation-vulnerability/
Post summary
Fortinet disclosed CVE-2026-84393, a certificate verification flaw in FortiOS/FortiProxy that can allow unauthenticated MITM attacks; no active exploitation is known, but a fix is available in 7.6.7+ and users are urged to apply the update.
0702083.6K
16.5K followersView on X
Rıdvan Yağlı@ridvanyagli46d
Patch
🚨 FortiOS ve FortiProxy'de önemli MITM açığı! Fortinet, Agentless ZTNA portalındaki hatalı TLS sertifika doğrulamasından kaynaklanan CVE-2026-84393 (CVSS 7.3) güvenlik açığını açıkladı. Açık, ağ üzerinde konumlanabilen kimlik doğrulaması gerektirmeyen bir saldırganın, ZTNA portalı ile backend web sitesi arasındaki trafiğe MITM saldırısı gerçekleştirmesine ve hassas verileri ele geçirmesine yol açabiliyor. 🔴 Etkilenen: FortiOS 7.6.1–7.6.6 ve FortiProxy 7.6.2–7.6.6 ✅ Çözüm: FortiOS/FortiProxy 7.6.7 veya üzeri Şu an için açığın aktif olarak istismar edildiğine dair bir kanıt bulunmuyor; ancak internet veya yarı güvenilir ağlara açık Agentless ZTNA kullanan sistemlerin gecikmeden güncellenmesi öneriliyor.
Post summary
Fortinet disclosed a MITM vulnerability (CVE-2026-84393) affecting FortiOS/FortiProxy with CVSS 7.3, no active exploitation evidence yet, and recommends patching to version 7.6.7.
0311131.3K
2.4K followersView on X
GovCERT.CZ@GOVCERT_CZ44d
Disclosure
🚨 Upozorňujeme na několik zranitelností v produktech Fortinet, CVE-2026-84388, CVE-2026-84390, CVE-2026-26084 a CVE-2026-84393. Zranitelnosti postihují FortiPAM Chrome Extension, FortiMonitor OnSight, FortiSandbox, FortiOS a FortiProxy a mohou neautentizovanému útočníkovi umožnit ovlivnit provoz prohlížeče při návštěvě škodlivého webu a přesměrovat jej přes infrastrukturu útočníka, obejít autentizaci pomocí podvržených nebo opakovaně použitých JWT tokenů, získat citlivé informace prostřednictvím speciálně vytvořených HTTP požadavků nebo provést útok typu man-in-the-middle, pokud se nachází na síťové trase mezi portálem Agentless ZTNA a backendovými weby. Úspěšné zneužití může vést k neoprávněnému přístupu, kompromitaci citlivých informací a odposlechu či manipulaci síťové komunikace. 📌Doporučujeme aktualizovat FortiPAM Chrome Extension 8.0 na verzi 8.0.1.123 nebo novější a u řady 7.4 přejít na opravenou verzi, FortiMonitor OnSight na verzi 7.2.8 nebo novější, FortiSandbox podle používané větve na verzi 4.4.9, 5.0.6 nebo 5.2.0 či novější, FortiSandbox Cloud a PaaS na verzi 5.0.6 nebo novější a FortiOS a FortiProxy na verzi 7.6.7 nebo novější, případně 8.0.0 nebo novější.
Post summary
The message announces multiple Fortinet CVEs that enable unauthenticated attackers to manipulate browser traffic, bypass authentication, and intercept sensitive data, and it advises updating to specific patched software releases.
10011869
4.3K followersView on X
Ariovis@ariovisoff39d
Patch
🚨 Alerte Fortinet : Une faille dans le portail ZTNA (CVE-2026-84393) pourrait permettre l'interception de trafic. En #ZeroTrust, la validation des accès doit être continue et sans faille. Pensez à mettre à jour FortiOS en version 7.6.7+ ! 🛡️ #CyberSecurity #IAM #ZTNA
Post summary
The alert highlights a Fortinet ZTNA portal vulnerability (CVE-2026-84393) and explicitly recommends updating FortiOS to version 7.6.7+ as a remediation action.
0000045
11 followersView on X
iototsecnews@iototsecnews39d
Patch
FortiOS／FortiProxy ZTNA の脆弱性 CVE-2026-84393 が FIX：未認証で悪用可能な攻撃経路 https://iototsecnews.jp/2026/09/08/fortios-and-fortiproxy-ztna-validation-vulnerability-allows-attacker-to-perform-a-man-in-the-middle-attack/ Fortinet が提供する FortiOS や FortiProxy において、Agentless ZTNA Portal の不適切な証明書検証の不具合が判明しました。この影響により、通信経路への介在／セッションの監視／機密データの閲覧といったリスクが生じます。これらへの対策として、影響を受ける 7.6 ブランチから 7.6.7 以降へのアップグレード／公式ツールの活用による円滑な移行／公開環境における適切なアクセス制御の再確認などの対応が求められます。技術的な課題である脆弱性 CVE-2026-84393 (CVSS 7.3) への迅速な対処が必要とされます。 #CVE202684393 #Fortinet #FortiOS #FortiProxy #Vulnerability
Post summary
The tweet reports CVE‑2026‑84393 in FortiOS/FortiProxy ZTNA, describes an unauthenticated certificate validation flaw enabling MITM attacks, cites CVSS 7.3, and urges upgrading to 7.6.7 or later as a patch.
00000107
513 followersView on X
Ergun Akman@AturcDestek40d
Disclosure
⚠️ Fortinet&#39;ten Yeni Güvenlik Uyarısı: FortiOS ve FortiProxy'de Adam-Ortada (MitM) Zafiyeti (CVE-2026-84393)! https://www.linkedin.com/pulse/fortinetten-yeni-g%25C3%25BCvenlik-uyar%25C4%25B1s%25C4%25B1-fortios-ve-mitm-zafiyeti-akman-vp3mf @LinkedIn aracılığıyla
Post summary
The post discloses a new Fortinet security advisory regarding a Man-in-the-Middle vulnerability (CVE-2026-84393) in FortiOS and FortiProxy, providing basic technical details without mentioning patches, exploits, or active exploitation.
0000054
20 followersView on X
VulDB 🛡@vuldb45d
General
Some increased actor activities are shown targeting Fortinet FortiOS and FortiProxy (CVE-2026-84393) https://vuldb.com/vuln/399929/cti
Post summary
The note signals heightened actor interest in Fortinet FortiOS and FortiProxy linked to CVE‑2026‑84393, yet it offers no proof of exploitation, PoC, patch, or detailed technical info.
00000119
2.3K followersView on X
The Daily Tech Feed@dailytechonx46d
Patch
New security alarm: Fortinet’s Agentless ZTNA has a certificate‐validation flaw (CVE-2026-84393) letting attackers perform MITM on FortiOS and FortiProxy. Versions 7.6.1-7.6.6 are vulnerable; upgrade to 7.6.7 or later. This unauthenticated risk puts exposed portals at serious risk—patch now if you rely on Fortinet ZTNA. #Security #ZTNA #Fortinet #CVE2026-84393 #ManInTheMiddle #PatchNow https://thedailytechfeed.com/serious-ztna-flaw-in-fortios-fortiproxy-opens-door-to-mitm-attack/
Post summary
Fortinet Agentless ZTNA has a certificate‑validation flaw (CVE‑2026‑84393) that can be exploited for MITM; versions 7.6.1‑7.6.6 are vulnerable and users are urged to upgrade to 7.6.7 or later.
0000099
718 followersView on X
Kaitan ID Security@KaitanSecurity46d
Disclosure
⚠️ HIGH — CVE-2026-84393 A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiPro… CVSS 8.1 Full analysis → https://sec.kaitan.id/cves/CVE-2026-84393 #Fortinet #CyberSecurity #InfoSec
Post summary
High‑severity certificate host‑mismatch flaw disclosed in Fortinet FortiOS and FortiPro, with technical details provided but no exploit, patch, or active exploitation reported.
0000038
86 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-84393

yousukezan[verified]@yousukezanPatch

Fortinet disclosed CVE-2026-84393, a certificate verification flaw in FortiOS/FortiProxy that can allow unauthenticated MITM attacks; no active exploitation is known, but a fix is available in 7.6.7+ and users are urged to apply the update.

Rıdvan Yağlı[verified]@ridvanyagliPatch

Fortinet disclosed a MITM vulnerability (CVE-2026-84393) affecting FortiOS/FortiProxy with CVSS 7.3, no active exploitation evidence yet, and recommends patching to version 7.6.7.

GovCERT.CZ[verified]@GOVCERT_CZDisclosure

The message announces multiple Fortinet CVEs that enable unauthenticated attackers to manipulate browser traffic, bypass authentication, and intercept sensitive data, and it advises updating to specific patched software releases.

The Daily Tech Feed[verified]@dailytechonxPatch

Fortinet Agentless ZTNA has a certificate‑validation flaw (CVE‑2026‑84393) that can be exploited for MITM; versions 7.6.1‑7.6.6 are vulnerable and users are urged to upgrade to 7.6.7 or later.

Kaitan ID Security[verified]@KaitanSecurityDisclosure

High‑severity certificate host‑mismatch flaw disclosed in Fortinet FortiOS and FortiPro, with technical details provided but no exploit, patch, or active exploitation reported.

Ariovis@ariovisoffPatch

The alert highlights a Fortinet ZTNA portal vulnerability (CVE-2026-84393) and explicitly recommends updating FortiOS to version 7.6.7+ as a remediation action.

iototsecnews@iototsecnewsPatch

The tweet reports CVE‑2026‑84393 in FortiOS/FortiProxy ZTNA, describes an unauthenticated certificate validation flaw enabling MITM attacks, cites CVSS 7.3, and urges upgrading to 7.6.7 or later as a patch.

Ergun Akman@AturcDestekDisclosure

The post discloses a new Fortinet security advisory regarding a Man-in-the-Middle vulnerability (CVE-2026-84393) in FortiOS and FortiProxy, providing basic technical details without mentioning patches, exploits, or active exploitation.