Skip to contentFortinet Forticlient vulnerabilities
- fortinet forticlientemsA execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7...CVE-2026-1215276.3 Medium
- fortinet forticlientmac, forticlientwindows, forticlientwindowspam +2 moreA origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7,...CVE-2026-121529Public exploit9.1 Critical
- fortinet forticlientwindowsA unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7,...CVE-2026-843864.7 Medium
- fortinet forticlient, forticlientwindows +1 moreA buffer copy without checking size of input ('classic buffer overflow') vulnerability in...CVE-2026-704657.3 High
- fortinet forticlientemsA improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5,...CVE-2026-598366.7 Medium
- fortinet forticlient, forticlientwindows +1 moreA use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through...CVE-2026-442782.1 Low
- fortinet forticlientemsA use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4...CVE-2026-398105.2 Medium
- fortinet forticlientemsA improper neutralization of special elements used in an sql command ('sql injection')...CVE-2026-398096.2 Medium
- fortinet forticlientems, forticlient ems +1 moreA improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow...CVE-2026-35616In KEVPublic exploitEPSS 94.0%9.1 Critical
- fortinet forticlient, forticlientlinux +1 moreA UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through...CVE-2026-24018Public exploit7.4 High
- fortinet forticlient, forticlientwindows +1 moreAn Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59]...CVE-2025-62676Public exploit6.4 Medium
- fortinet forticlientems, forticlient ems +1 moreAn improper neutralization of special elements used in an sql command ('sql injection')...CVE-2026-21643In KEVPublic exploitEPSS 97.7%9.1 Critical
- fortinet forticlientemsAn improper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2025-599226.8 Medium
- fortinet forticlient, forticlientwindows +1 moreAn active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3,...CVE-2025-546604.9 Medium
- fortinet forticlient, forticlientwindows +1 moreA Heap-based Buffer Overflow vulnerability [CWE-122] in Fortinet FortiClientWindows 7.4.0 through...CVE-2025-463737.1 High
- fortinet forticlient, forticlientwindows +1 moreAn Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] in Fortinet...CVE-2025-477617.1 High
- fortinet forticlient, forticlientmac +1 moreAn Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS...CVE-2025-467746.8 Medium
- fortinet forticlient, forticlientmac +1 moreAn Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in...CVE-2025-313655.5 Medium
- fortinet forticlient, forticlientwindows +1 moreAn Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through...CVE-2025-577166.0 Medium
- fortinet forticlient, forticlientmac +1 moreAn Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in...CVE-2025-577417.0 High
- fortinet forticlientemsA server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0...CVE-2023-487864.1 Medium
- fortinet forticlientemsAn improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and...CVE-2024-321194.6 Medium
- fortinet forticlient, forticlientwindows +1 moreA improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7...CVE-2024-540194.4 Medium
- fortinet forticlient, forticlientwindows +1 moreA exposure of sensitive system information to an unauthorized control sphere in Fortinet...CVE-2025-244734.8 Medium
- fortinet forticlient, forticlientmac +1 moreAn Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0...CVE-2025-252517.4 High
- fortinet forticlientems, forticlientems cloud +1 moreA Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and...CVE-2025-228595.0 Medium
- fortinet forticlient, forticlientmac, fortivoiceucdesktop +1 more +3 moreAn improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7...CVE-2024-352812.3 Low
- fortinet forticlientemsAn improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79]...CVE-2025-228552.6 Low
- fortinet forticlientemsAn Improper Neutralization of Input During Web Page Generation in FortiClientEMS version 6.2.0...CVE-2019-161495.4 Medium
- fortinet antivirus engine, forticlientwindows +1 moreFortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6...CVE-2020-92954.7 Medium
- fortinet forticlient, forticlientmac +1 moreAn external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3...CVE-2023-455887.8 High
- fortinet forticlient, forticlientwindows +1 moreAn Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version...CVE-2024-40586Public exploit6.3 Medium
- fortinet forticlient, forticlientmac +1 moreAn improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to...CVE-2024-529685.8 Medium
- fortinet forticlientemsAn improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version...CVE-2024-231067.7 High
- fortinet forticlientems, forticlientems cloud +1 moreAn improper verification of source of a communication channel vulnerability [CWE-940] in...CVE-2024-365063.5 Low
- fortinet forticlient, forticlientwindows +1 moreA use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all...CVE-2024-505643.2 Low
- fortinet forticlientems, fortisoar +1 moreAn observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through...CVE-2024-365104.9 Medium
- fortinet forticlient, forticlientlinux +1 moreAn execution with unnecessary privileges vulnerability in the VCM engine of FortiClient for Linux...CVE-2020-159348.6 High
- fortinet forticlient, forticlientlinux, forticlientwindows +1 more +3 moreA Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0...CVE-2024-505704.9 Medium
- fortinet forticlient, forticlientwindows +1 moreA authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version...CVE-2024-475747.4 High
- fortinet forticlient, forticlientmac +1 moreAn improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS...CVE-2024-405926.8 Medium
- fortinet forticlient, forticlientwindows +1 moreA untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2...CVE-2024-365076.7 Medium
- fortinet forticlient, forticlientwindows +1 moreA privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4...CVE-2024-365137.4 High
- fortinet forticlient, forticlientlinux, forticlientmac +2 more +4 moreAAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7...CVE-2024-314896.4 Medium
- fortinet forticlientems, forticlient endpoint management server +1 moreA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...CVE-2024-217535.5 Medium
- fortinet forticlient, forticlientandroid, forticlientios +3 more +5 moreAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions...CVE-2022-458564.6 Medium
- fortinet forticlient, forticlientios +1 moreA cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting...CVE-2024-352823.9 Low
- fortinet forticlientems, forticlient endpoint management server, forticlient enterprise management server +2 moreAn improper neutralization of special elements used in a command ('Command Injection')...CVE-2024-335086.9 Medium
- ietf dhcp, cisco anyconnect vpn client, secure client +7 more +9 moreDHCP routing options can manipulate interface-based VPN trafficCVE-2024-3661Public exploitFix available7.6 High
- fortinet forticlient, forticlientmac +1 moreAn external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3...CVE-2024-314927.8 High
- Show olderLoading…