Fortinet Privileged Access Agent: Any Site Could Control Your Proxy and Watch Your Tabhttps://www.reddit.com/r/netsec/comments/1wbi40d/fortinet_privileged_access_agent_any_site_could
TL;DR. The FortiPAM Chrome extension (1M+ users), used for Privileged Access Management, allowed any site to set the browser's proxy for the session, alongside allowing any site to create a new tab and send screen recordings of it to an attacker's server. That makes for trivial phishing attacks which only require the user to view something sensitive in the attacker-opened tab. CVSS 9.1 | CVE-2026-84388 . submitted by /u/acorn222 [link] [comments]