Find a vulnerability

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

1 vulnerability found for FortiClientWindowsPAM by Fortinet

CVE-2026-121529 (GCVE-0-2026-121529)

Vulnerability from cvelistv5 – Published: 2026-11-10 20:10 – Updated: 2026-11-10 20:32

Summary

A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2.0 through 7.2.14, FortiClientWindowsPAM 7.4.7, FortiClientWindowsPAM 7.2.14 may allow an unauthorized remote attacker to execute unauthorized code or commands. Successful exploitation requires interaction with the victim.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-11-10 20:32 UTC

CWE

CWE-346 - Escalation of privilege

Assigner

fortinet CNA

References

1 reference

URL	Tags
https://fortiguard.fortinet.com/psirt/FG-IR-26-194

Impacted products

3 products

Vendor	Product	Version
Fortinet	FortiClientMac	Affected: 7.4.0 , ≤ 7.4.7 (semver) cpe:2.3:a:fortinet:forticlientmac:7.4.7:::::::* cpe:2.3:a:fortinet:forticlientmac:7.4.6:::::::* cpe:2.3:a:fortinet:forticlientmac:7.4.5:::::::* cpe:2.3:a:fortinet:forticlientmac:7.4.4:::::::* cpe:2.3:a:fortinet:forticlientmac:7.4.3:::::::* cpe:2.3:a:fortinet:forticlientmac:7.4.2:::::::* cpe:2.3:a:fortinet:forticlientmac:7.4.1:::::::* cpe:2.3:a:fortinet:forticlientmac:7.4.0:::::::*
Fortinet	FortiClientWindows	Affected: 7.4.0 , ≤ 7.4.7 (semver) Affected: 7.2.0 , ≤ 7.2.14 (semver) cpe:2.3:a:fortinet:forticlientwindows:7.4.7:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.4.6:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.4.5:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.4.4:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.4.3:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.4.2:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.4.1:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.4.0:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.2.14:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.2.13:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.2.12:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.2.11:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.2.10:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.2.9:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.2.8:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.2.7:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.2.6:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.2.5:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.2.4:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.2.3:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.2.2:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.2.1:::::::* cpe:2.3:a:fortinet:forticlientwindows:7.2.0:::::::*
Fortinet	FortiClientWindowsPAM	Affected: 7.4.7 Affected: 7.2.14 cpe:2.3:a:fortinet:forticlientwindowspam:7.4.7:::::::* cpe:2.3:a:fortinet:forticlientwindowspam:7.2.14:::::::*

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-121529",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-10T20:32:32.554778Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-10T20:32:45.405Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:fortinet:forticlientmac:7.4.7:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientmac:7.4.6:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientmac:7.4.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientmac:7.4.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientmac:7.4.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientmac:7.4.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientmac:7.4.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientmac:7.4.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "FortiClientMac",
          "vendor": "Fortinet",
          "versions": [
            {
              "lessThanOrEqual": "7.4.7",
              "status": "affected",
              "version": "7.4.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:fortinet:forticlientwindows:7.4.7:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.4.6:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.4.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.4.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.4.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.4.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.4.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.4.0:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.2.14:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.2.13:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.2.12:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.2.11:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.2.10:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.2.9:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.2.8:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.2.7:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.2.6:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.2.5:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.2.4:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.2.3:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.2.2:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindows:7.2.0:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "FortiClientWindows",
          "vendor": "Fortinet",
          "versions": [
            {
              "lessThanOrEqual": "7.4.7",
              "status": "affected",
              "version": "7.4.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.14",
              "status": "affected",
              "version": "7.2.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:fortinet:forticlientwindowspam:7.4.7:*:*:*:*:*:*:*",
            "cpe:2.3:a:fortinet:forticlientwindowspam:7.2.14:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "product": "FortiClientWindowsPAM",
          "vendor": "Fortinet",
          "versions": [
            {
              "status": "affected",
              "version": "7.4.7"
            },
            {
              "status": "affected",
              "version": "7.2.14"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2.0 through 7.2.14, FortiClientWindowsPAM 7.4.7, FortiClientWindowsPAM 7.2.14 may allow an unauthorized remote attacker to execute unauthorized code or commands. Successful exploitation requires interaction with the victim."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-346",
              "description": "Escalation of privilege",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-10T20:10:36.385Z",
        "orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
        "shortName": "fortinet"
      },
      "references": [
        {
          "name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-194",
          "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-194"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to FortiClientWindowsPAM version 8.0.0 or above\nUpgrade to FortiClientWindowsPAM version 7.4.8 or above\nUpgrade to FortiClientWindowsPAM version 7.2.15 or above\nUpgrade to FortiClientWindows version 8.0.0 or above\nUpgrade to FortiClientWindows version 7.4.8 or above\nUpgrade to FortiClientWindows version 7.2.15 or above\nUpgrade to FortiClientMac version 8.0.0 or above\nUpgrade to FortiClientMac version 7.4.8 or above"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
    "assignerShortName": "fortinet",
    "cveId": "CVE-2026-121529",
    "datePublished": "2026-11-10T20:10:36.385Z",
    "dateReserved": "2026-11-03T14:32:11.672Z",
    "dateUpdated": "2026-11-10T20:32:45.405Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}