CVE-2026-84390: Critical severity Fortinet FortiMonitorOnSight vulnerability
Published Sep 11, 2026
·Updated
A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker to improper access control via <insert attack vector here>
Affected Software
1 affected component
Fortinet FortiMonitorOnSight>=7.2.4<=7.2.7, >=7.2.0<=7.2.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Fortinet FortiMonitorOnSightto a version that resolves this vulnerability.Fixed in 7.2.8
Event History
Sep 11, 2026
CVE Published
via MITRE·12:13 PM
Data Sourced
via MITRE·12:13 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are in the affected version ranges?
FortiMonitorOnSight versions 7.2.4 through 7.2.7 and 7.2.0 through 7.2.2 are listed as affected. No information is provided about versions outside those ranges.
2
Does exploitation require authentication or user interaction?
The supplied severity vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.