Skip to content
Fortinet Patches Critical FortiClient Vulnerability CVE-2026-121529

Fortinet Patches Critical FortiClient Vulnerability CVE-2026-121529

First seen 12 Nov 2026, 09:18 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 12, 2026 at 09:19 UTC
  • •CVE-2026-121529 is a critical vulnerability with a CVSS score of 9.1.
  • •The vulnerability affects multiple versions of FortiClient on Windows and macOS.
  • •Fortinet released patches on November 10, 2026, but no exploitation has been confirmed yet.

Fortinet has patched a critical vulnerability in FortiClient, identified as CVE-2026-121529, which could allow attackers to execute malicious code on Windows and macOS devices via a malicious website. The flaw, rated 9.1 on the CVSS scale, affects FortiClient versions 7.4.0–7.4.7 and 7.2.0–7.2.14. The vulnerability stems from improper security restrictions in a local API service, potentially enabling unauthenticated endpoint compromise. Fortinet released fixes in versions 7.4.8 and 7.2.15 on November 10, 2026, during Patch Tuesday. Despite the patch, experts warn that the approach of withholding technical details may leave organizations vulnerable to well-resourced attackers. No confirmed exploitation has been reported in the wild as of now, but the situation remains critical due to the widespread use of Fortinet products in enterprise networks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 4h ago How this analysis works

Timeline

2026-11-10
Fortinet releases patches for vulnerabilities
Fortinet published fixes for CVE-2026-121529 and other vulnerabilities during Patch Tuesday.
Cyberdaily.Au
2026-11-11
First public PoC for CVE-2026-121529
A proof-of-concept for the critical vulnerability CVE-2026-121529 was made public.
Cyberdaily.Au

More articles in this cluster (2)

Following this threat?

Track Fortinet and CVE-2026-121529 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 2

Common questions

Which versions of FortiClient are affected?
FortiClient versions 7.4.0–7.4.7 on Windows and macOS, and 7.2.0–7.2.14 on Windows are affected.
Has this vulnerability been exploited in the wild?
No confirmed exploitation has been reported as of now.
What should organizations do to protect themselves?
Organizations should review and apply the patches released in versions 7.4.8 and 7.2.15.