← Home
Broken Access control on Websocket streams
Source: fortinet / FG-IR-26-164
— original advisory
Published: 2026-09-08
· Last updated: 2026-09-08
· Vendor severity: Not rated by vendor
CVEs
| CVE | CVSS | CWE | Exploitation |
|---|
| CVE-2026-84385 |
4.9 |
CWE-284: Improper Access Control |
Not observed in the wild |
Affected Products
| Product | Affected versions | Fixed version |
|---|
| FortiSOAR on-premise |
FortiSOAR on-premise 7.3 |
Not specified by vendor |
| FortiSOAR on-premise |
FortiSOAR on-premise 8.0 |
Not specified by vendor |
| FortiSOAR on-premise |
FortiSOAR on-premise 7.6 |
Not specified by vendor |
| FortiSOAR on-premise |
FortiSOAR on-premise 7.5 |
Not specified by vendor |
| FortiSOAR on-premise |
FortiSOAR on-premise 7.4 |
Not specified by vendor |
| FortiSOAR PaaS |
FortiSOAR PaaS 8.0 |
Not specified by vendor |
| FortiSOAR PaaS |
FortiSOAR PaaS 7.6 |
Not specified by vendor |
| FortiSOAR PaaS |
FortiSOAR PaaS 7.5 |
Not specified by vendor |
| FortiSOAR PaaS |
FortiSOAR PaaS 7.4 |
Not specified by vendor |
| FortiSOAR PaaS |
FortiSOAR PaaS 7.3 |
Not specified by vendor |