JWT used for authentication in web GUI signed with static key

Source: fortinet / FG-IR-26-170 — original advisory

Published: 2026-09-08 · Last updated: 2026-09-08 · Vendor severity: Not rated by vendor

CVEs

CVE	CVSS	CWE	Exploitation
CVE-2026-84390	9.6	CWE-540	Not observed in the wild

Product	Affected versions	Fixed version
FortiMonitorOnSight	FortiMonitorOnSight 7.2	Not specified by vendor