CVE-2026-84385 — Fortinet / FortiSOAR on-premise

Description (CNA)

A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow attacker to escalation of privilege via <insert attack vector here>

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiSOAR on-premise	affected 7.6.0 through 7.6.6; affected 7.5.0 through 7.5.3; affected 7.4.0 through 7.4.5; affected 7.3.0 through 7.3.3
Fortinet / FortiSOAR PaaS	affected 7.6.0 through 7.6.6; affected 7.5.0 through 7.5.3; affected 7.4.0 through 7.4.5; affected 7.3.0 through 7.3.3

CWE

CWE-284

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-164

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.