Critical severity9.6NVD Advisory· Published Nov 10, 2026· Updated Nov 10, 2026

CVE-2026-121529

Description

A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2.0 through 7.2.14, FortiClientWindowsPAM 7.4.7, FortiClientWindowsPAM 7.2.14 may allow an unauthorized remote attacker to execute unauthorized code or commands. Successful exploitation requires interaction with the victim.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fortinet/FortiClientMacllm-fuzzy
Range: 7.4.0-7.4.7
Fortinet/Forticlient Windowsllm-fuzzy
Range: 7.4.0-7.4.7, 7.2.0-7.2.14
Fortinet/FortiClientWindowsPAMllm-create
Range: 7.4.7, 7.2.14

Patches

Vulnerability mechanics

References

fortiguard.fortinet.com/psirt/FG-IR-26-194nvd

News mentions

No linked articles in our index yet.

cvss	0.624
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000