CVE-2026-84390
Critical · 9.8CVSS
9.8
EPSS
0.5%
Published
Sep 11, 2026
CISA due date
—
The record
A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker to improper access control via <insert attack vector here>
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-45728 Algernon is a small self-contained pure-Go web server. CWE-540
- CVE-2026-4155 ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information… CWE-540
- CVE-2026-35383 Bentley Systems iTwin Platform exposed a Cesium ion access token in the source of some… CWE-540
- CVE-2026-22275 Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to… CWE-540