Findings

CVE-2026-84393

A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to inf…

Published Sep 8, 2026 · updated Oct 15, 2026 · Fortinet FortiOS

A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via

Timeline

Detection, updates, and resolution for this record.

  1. Sep 8, 2026 · NIST NVD

    Detected

    A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via

  2. Oct 15, 2026 · NIST NVD

    Updated

    A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via

Affected

  • vendor Fortinet FortiOSversion unspecified
  • vendor Fortinet FortiProxyversion unspecified

Sources

  • A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via

    vulnerability.circl.lu
  • CVE.orgCVE-2026-84393

    Official CVE identifier

    cve.org
  • NIST NVDCVE-2026-84393

    A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via

    nvd.nist.gov

References