CVE-2026-84385

A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSOAR on-premise 7.5.0 through 7.5.3, FortiSOAR on-premise 7.4 all versions, FortiSOAR on-premise 7.3 all versions may allow attacker to escalation of privilege via <insert attack vector here>

Scoring

Severity

MEDIUM

CVSS base score

4.9

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C

CWE

CWE-284

Published

2026-09-08

Last modified

2026-09-08

Affected products

• Fortinet FortiSOAR on-premise
• Fortinet FortiSOAR on-premise
• Fortinet FortiSOAR on-premise
• Fortinet FortiSOAR on-premise
• Fortinet FortiSOAR PaaS
• Fortinet FortiSOAR PaaS
• Fortinet FortiSOAR PaaS
• Fortinet FortiSOAR PaaS

Weakness type

• CWE-284

Related vulnerabilities

• CVE-2026-50165 — alf.io has Improper Access Control for Organization Owners that Exposes System Secrets
• CVE-2026-86774 — Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy
• CVE-2026-19625 — IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities
• CVE-2026-75998 — ColdFusion | Improper Access Control (CWE-284)
• CVE-2026-86672 — ningzichun Student Management System Backup example.7z information disclosure
• CVE-2026-81963 — Windows Update Stack Elevation of Privilege Vulnerability
• CVE-2026-77487 — SQL Server Elevation of Privilege Vulnerability
• CVE-2026-73028 — SQL Server Elevation of Privilege Vulnerability

Markdown version · Browse all CVEs