Fortinet FortiOS/Proxy <=7.6.6 Hostname Cert Mismatch Info Disclosure
CVE-2026-84393 Published on September 8, 2026
A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via <insert attack vector here>
Vulnerability Analysis
CVE-2026-84393 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
Improper Validation of Certificate with Host Mismatch
The software communicates with a host that provides a certificate, but the software does not properly ensure that the certificate is actually associated with that host.
Products Associated with CVE-2026-84393
stack.watch emails you whenever new vulnerabilities are published in Fortinet FortiOS or Fortinet FortiProxy. Just hit a watch button to start following.
Affected Versions
Fortinet FortiOS:- Version 7.6.1, <= 7.6.6 is affected.
- Version 7.6.2, <= 7.6.6 is affected.