Description
A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.7, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow an authenticated local attacker with admin privileges to gain root shell access via CLI commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiClientEMS | 7.4.3 – ≤ 7.4.7, 7.4.0 – ≤ 7.4.1, 7.2.12 – ≤ 7.2.15, 7.2.0 – ≤ 7.2.10 | — |
Advisories 2
- NCSC-2026-0486 Kwetsbaarheden verholpen in Fortinet FortiClient en FortiClientEMS NCSC-NL (Netherlands) · Nov 12, 2026
- WID-SEC-2026-4489 Fortinet Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2026