A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests.
7.3Yüksek
CVE-2026-84393
Açıklama
A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via <insert attack vector here>
Zayıflık türü (CWE):
CWE-297
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Fortinet | FortiOS | 7.6.1 – ≤ 7.6.6 | |
| Fortinet | FortiProxy | 7.6.2 – ≤ 7.6.6 | |
| Siemens | RUGGEDCOM APE1808 | 0 |