CVE-2026-121529
Origin Validation Error Enabling Remote Code Execution in FortiClient
A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2.0 through 7.2.14, FortiClientWindowsPAM 7.4.7, FortiClientWindowsPAM 7.2.14 may allow an unauthorized remote attacker to execute unauthorized code or commands. Successful exploitation requires interaction with the victim.
CVSS 3.1 · 9.1 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products