CVE-2026-121529 A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2.0 through 7.2.14, FortiClientWindowsPAM 7.4.7, Fo...
CriticalCVSS 9.1
- Published
- Updated
- Exploit status
- No public exploit known
Description
A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2.0 through 7.2.14, FortiClientWindowsPAM 7.4.7, FortiClientWindowsPAM 7.2.14 may allow an unauthorized remote attacker to execute unauthorized code or commands. Successful exploitation requires interaction with the victim.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fortinet forticlientmac | >= 7.4.0, <= 7.4.7 | No fix listed |
| fortinet forticlientwindows | >= 7.4.0, <= 7.4.7 | No fix listed |
| fortinet forticlientwindows | >= 7.2.0, <= 7.2.14 | No fix listed |
| fortinet forticlientwindowspam | = 7.4.7 | No fix listed |
| fortinet forticlientwindowspam | = 7.2.14 | No fix listed |