Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension
Source SecurityWeek
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 09/09/2026, 14:37:20 UTC
What to do
AI-suggested
Fortinet has released official patches addressing these vulnerabilities. To fully remediate the critical Chrome extension vulnerability, customers must upgrade FortiPAM to version 1.9.1 or 1.8.4 and update the Fortinet Privileged Access Agent Chrome extension to version 8.0.1.123 or later. Users should apply these updates promptly. Additional patches for other affected Fortinet products should also be applied as per vendor advisories. No further mitigation steps are indicated beyond applying these official fixes.
Description
Fortinet released patches for multiple vulnerabilities including critical unauthenticated flaws in FortiMonitorOnSight and the Fortinet Privileged Access Agent Chrome extension. The critical issues allow attackers to bypass authentication using forged or reused JSON Web Tokens and proxy a user's browser traffic by exploiting improper authentication in the Chrome extension. Coordinated updates to FortiPAM and the Chrome extension are required for full remediation. Additional high-severity and medium/low-severity vulnerabilities affecting other Fortinet products were also patched. No exploitation in the wild has been reported.
Impact
Successful exploitation of CVE-2026-84390 allows unauthenticated attackers to bypass authentication on the FortiMonitorOnSight portal, potentially gaining unauthorized access. CVE-2026-84388 enables attackers to proxy a user's browser traffic via the Fortinet Privileged Access Agent Chrome extension, which could lead to interception or manipulation of user traffic. Other patched vulnerabilities could allow sensitive information disclosure, man-in-the-middle attacks, denial-of-service, arbitrary code execution, and other impacts depending on the specific flaw. No active exploitation has been reported.