CVE-2026-84386

Published: Sep 8, 2026Modified: Oct 2, 2026

5.1

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

Exploitability: 0.8 / Impact: 4.2

Source: psirt@fortinet.com (Secondary)

Description

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port.

Related CWEs

CWE-283

Unverified Ownership

The product does not properly verify that a critical resource is owned by the proper entity.

References (1)

https://fortiguard.fortinet.com/psirt/FG-IR-26-165

Source: psirt@fortinet.com

Timeline

No history available yet.