Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for FortiClientWindowsPAM by Fortinet

    CVE-2026-121529 (GCVE-0-2026-121529)

    Vulnerability from nvd – Published: 2026-11-10 20:10 – Updated: 2026-11-10 20:32
    VLAI
    Summary
    A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2.0 through 7.2.14, FortiClientWindowsPAM 7.4.7, FortiClientWindowsPAM 7.2.14 may allow an unauthorized remote attacker to execute unauthorized code or commands. Successful exploitation requires interaction with the victim.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-11-10 20:32 UTC
    CWE
    • CWE-346 - Escalation of privilege
    Assigner
    fortinet CNA under the mitre root
    CNA scorecard C 72/100 over 52 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Fortinet FortiClientMac Affected: 7.4.0 , ≤ 7.4.7 (semver)
        cpe:2.3:a:fortinet:forticlientmac:7.4.7:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientmac:7.4.6:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientmac:7.4.5:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientmac:7.4.4:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientmac:7.4.3:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientmac:7.4.2:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientmac:7.4.1:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientmac:7.4.0:*:*:*:*:*:*:*
    Create a notification for this product.
    Fortinet FortiClientWindows Affected: 7.4.0 , ≤ 7.4.7 (semver)
    Affected: 7.2.0 , ≤ 7.2.14 (semver)
        cpe:2.3:a:fortinet:forticlientwindows:7.4.7:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.4.6:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.4.5:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.4.4:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.4.3:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.4.2:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.4.1:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.4.0:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.14:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.13:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.12:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.11:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.10:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.9:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.8:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.7:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.6:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.5:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.4:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.3:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.2:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.0:*:*:*:*:*:*:*
    Create a notification for this product.
    Fortinet FortiClientWindowsPAM Affected: 7.4.7
    Affected: 7.2.14
        cpe:2.3:a:fortinet:forticlientwindowspam:7.4.7:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindowspam:7.2.14:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-121529",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-11-10T20:32:32.554778Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-11-10T20:32:45.405Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:fortinet:forticlientmac:7.4.7:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientmac:7.4.6:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientmac:7.4.5:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientmac:7.4.4:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientmac:7.4.3:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientmac:7.4.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientmac:7.4.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientmac:7.4.0:*:*:*:*:*:*:*"
              ],
              "defaultStatus": "unaffected",
              "product": "FortiClientMac",
              "vendor": "Fortinet",
              "versions": [
                {
                  "lessThanOrEqual": "7.4.7",
                  "status": "affected",
                  "version": "7.4.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:fortinet:forticlientwindows:7.4.7:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.4.6:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.4.5:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.4.4:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.4.3:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.4.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.4.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.4.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.14:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.13:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.12:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.11:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.10:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.9:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.8:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.7:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.6:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.5:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.4:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.3:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.0:*:*:*:*:*:*:*"
              ],
              "defaultStatus": "unaffected",
              "product": "FortiClientWindows",
              "vendor": "Fortinet",
              "versions": [
                {
                  "lessThanOrEqual": "7.4.7",
                  "status": "affected",
                  "version": "7.4.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "7.2.14",
                  "status": "affected",
                  "version": "7.2.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:fortinet:forticlientwindowspam:7.4.7:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindowspam:7.2.14:*:*:*:*:*:*:*"
              ],
              "defaultStatus": "unaffected",
              "product": "FortiClientWindowsPAM",
              "vendor": "Fortinet",
              "versions": [
                {
                  "status": "affected",
                  "version": "7.4.7"
                },
                {
                  "status": "affected",
                  "version": "7.2.14"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2.0 through 7.2.14, FortiClientWindowsPAM 7.4.7, FortiClientWindowsPAM 7.2.14 may allow an unauthorized remote attacker to execute unauthorized code or commands. Successful exploitation requires interaction with the victim."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.1,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-346",
                  "description": "Escalation of privilege",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-11-10T20:10:36.385Z",
            "orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
            "shortName": "fortinet"
          },
          "references": [
            {
              "name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-194",
              "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-194"
            }
          ],
          "solutions": [
            {
              "lang": "en",
              "value": "Upgrade to FortiClientWindowsPAM version 8.0.0 or above\nUpgrade to FortiClientWindowsPAM version 7.4.8 or above\nUpgrade to FortiClientWindowsPAM version 7.2.15 or above\nUpgrade to FortiClientWindows version 8.0.0 or above\nUpgrade to FortiClientWindows version 7.4.8 or above\nUpgrade to FortiClientWindows version 7.2.15 or above\nUpgrade to FortiClientMac version 8.0.0 or above\nUpgrade to FortiClientMac version 7.4.8 or above"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
        "assignerShortName": "fortinet",
        "cveId": "CVE-2026-121529",
        "datePublished": "2026-11-10T20:10:36.385Z",
        "dateReserved": "2026-11-03T14:32:11.672Z",
        "dateUpdated": "2026-11-10T20:32:45.405Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-121529 (GCVE-0-2026-121529)

    Vulnerability from cvelistv5 – Published: 2026-11-10 20:10 – Updated: 2026-11-10 20:32
    VLAI
    Summary
    A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2.0 through 7.2.14, FortiClientWindowsPAM 7.4.7, FortiClientWindowsPAM 7.2.14 may allow an unauthorized remote attacker to execute unauthorized code or commands. Successful exploitation requires interaction with the victim.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-11-10 20:32 UTC
    CWE
    • CWE-346 - Escalation of privilege
    Assigner
    fortinet CNA under the mitre root
    CNA scorecard C 72/100 over 52 records in the last 180 days details
    References
    Impacted products
    Vendor Product Version
    Fortinet FortiClientMac Affected: 7.4.0 , ≤ 7.4.7 (semver)
        cpe:2.3:a:fortinet:forticlientmac:7.4.7:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientmac:7.4.6:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientmac:7.4.5:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientmac:7.4.4:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientmac:7.4.3:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientmac:7.4.2:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientmac:7.4.1:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientmac:7.4.0:*:*:*:*:*:*:*
    Create a notification for this product.
    Fortinet FortiClientWindows Affected: 7.4.0 , ≤ 7.4.7 (semver)
    Affected: 7.2.0 , ≤ 7.2.14 (semver)
        cpe:2.3:a:fortinet:forticlientwindows:7.4.7:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.4.6:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.4.5:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.4.4:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.4.3:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.4.2:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.4.1:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.4.0:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.14:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.13:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.12:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.11:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.10:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.9:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.8:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.7:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.6:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.5:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.4:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.3:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.2:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindows:7.2.0:*:*:*:*:*:*:*
    Create a notification for this product.
    Fortinet FortiClientWindowsPAM Affected: 7.4.7
    Affected: 7.2.14
        cpe:2.3:a:fortinet:forticlientwindowspam:7.4.7:*:*:*:*:*:*:*
        cpe:2.3:a:fortinet:forticlientwindowspam:7.2.14:*:*:*:*:*:*:*
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-121529",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-11-10T20:32:32.554778Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-11-10T20:32:45.405Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:fortinet:forticlientmac:7.4.7:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientmac:7.4.6:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientmac:7.4.5:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientmac:7.4.4:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientmac:7.4.3:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientmac:7.4.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientmac:7.4.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientmac:7.4.0:*:*:*:*:*:*:*"
              ],
              "defaultStatus": "unaffected",
              "product": "FortiClientMac",
              "vendor": "Fortinet",
              "versions": [
                {
                  "lessThanOrEqual": "7.4.7",
                  "status": "affected",
                  "version": "7.4.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:fortinet:forticlientwindows:7.4.7:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.4.6:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.4.5:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.4.4:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.4.3:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.4.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.4.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.4.0:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.14:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.13:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.12:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.11:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.10:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.9:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.8:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.7:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.6:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.5:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.4:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.3:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.2:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindows:7.2.0:*:*:*:*:*:*:*"
              ],
              "defaultStatus": "unaffected",
              "product": "FortiClientWindows",
              "vendor": "Fortinet",
              "versions": [
                {
                  "lessThanOrEqual": "7.4.7",
                  "status": "affected",
                  "version": "7.4.0",
                  "versionType": "semver"
                },
                {
                  "lessThanOrEqual": "7.2.14",
                  "status": "affected",
                  "version": "7.2.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "cpes": [
                "cpe:2.3:a:fortinet:forticlientwindowspam:7.4.7:*:*:*:*:*:*:*",
                "cpe:2.3:a:fortinet:forticlientwindowspam:7.2.14:*:*:*:*:*:*:*"
              ],
              "defaultStatus": "unaffected",
              "product": "FortiClientWindowsPAM",
              "vendor": "Fortinet",
              "versions": [
                {
                  "status": "affected",
                  "version": "7.4.7"
                },
                {
                  "status": "affected",
                  "version": "7.2.14"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2.0 through 7.2.14, FortiClientWindowsPAM 7.4.7, FortiClientWindowsPAM 7.2.14 may allow an unauthorized remote attacker to execute unauthorized code or commands. Successful exploitation requires interaction with the victim."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.1,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
                "version": "3.1"
              },
              "format": "CVSS"
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-346",
                  "description": "Escalation of privilege",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-11-10T20:10:36.385Z",
            "orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
            "shortName": "fortinet"
          },
          "references": [
            {
              "name": "https://fortiguard.fortinet.com/psirt/FG-IR-26-194",
              "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-194"
            }
          ],
          "solutions": [
            {
              "lang": "en",
              "value": "Upgrade to FortiClientWindowsPAM version 8.0.0 or above\nUpgrade to FortiClientWindowsPAM version 7.4.8 or above\nUpgrade to FortiClientWindowsPAM version 7.2.15 or above\nUpgrade to FortiClientWindows version 8.0.0 or above\nUpgrade to FortiClientWindows version 7.4.8 or above\nUpgrade to FortiClientWindows version 7.2.15 or above\nUpgrade to FortiClientMac version 8.0.0 or above\nUpgrade to FortiClientMac version 7.4.8 or above"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
        "assignerShortName": "fortinet",
        "cveId": "CVE-2026-121529",
        "datePublished": "2026-11-10T20:10:36.385Z",
        "dateReserved": "2026-11-03T14:32:11.672Z",
        "dateUpdated": "2026-11-10T20:32:45.405Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }