CVE-2026-84392
LowCVSS 2.7Exploitation Probability (EPSS)
Elevated risk65th percentile - higher than 65% of all known CVEs
Summary
A NULL Pointer Dereference vulnerability (CWE-476) in Fortinet FortiOS, FortiPAM and FortiProxy. An authenticated attacker can send crafted HTTP requests to crash the httpsd daemon.
Risk Assessment
An attacker with a valid account can crash the HTTPS management service, causing unavailability of the administrative interface and potential impact on device availability.
Recommendation
Update FortiOS, FortiPAM and FortiProxy to patched versions and restrict access to the administrative interface to trusted networks.
Other vulnerabilities in Fortinet FortiOS/FortiPAM/FortiProxy
See all- CVE-2025-54821Low
An improper privilege management vulnerability (CWE-269) exists in Fortinet FortiOS, FortiPAM, and FortiProxy. An authenticated administrator may bypass the trusted host policy via a crafted CLI command.
- CVE-2023-36640Medium
Fortinet FortiOS, FortiPAM, and FortiProxy in the listed versions contain a use of externally-controlled format string vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted commands. The vulnerability affects multiple versions of FortiOS (7.4.0, 7.2.0-7.2.5, 7.0, 6.4, 6.2, 6.0.0-6.0.16), FortiPAM (1.1.0, 1.0), and FortiProxy (7.2.0-7.2.5, 7.0.0-7.0.11, 2.0, 1.2, 1.1, and others).
- CVE-2023-29181High
A use of externally-controlled format string vulnerability in Fortinet FortiOS, FortiPAM, and FortiProxy allows an attacker to execute unauthorized code or commands via a specially crafted command.
Original NVD description (English source)
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an authenticated attacker to crash the httpsd daemon via crafted HTTP requests.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS