Skip to content

CVE-2026-121529

CVE

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
November 11, 2026
Last Seen
November 12, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Fortinet2Shell Vulnerability Allows Remote Code Execution via Malicious Websites70.5

A critical vulnerability in FortiClient, tracked as CVE-2026-121529, has been disclosed, allowing attackers to execute arbitrary code on systems through malicious websites. This flaw is due to an origin validation error in the local API, affecting FortiClient Windows, Windows PAM, and Mac versions 7...

Fortinet Patches Critical FortiClient Vulnerability CVE-2026-12152957.8

Fortinet has patched a critical vulnerability in FortiClient, identified as CVE-2026-121529, which could allow attackers to execute malicious code on Windows and macOS devices via a malicious website. The flaw, rated 9.1 on the CVSS scale, affects FortiClient versions 7.4.0–7.4.7 and 7.2.0–7.2.14. T...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Zero-day ExploitMalwarePatch TuesdaySecurity Hardening ReleaseFortinetCWE-346 - Origin Validation ErrorEKZT1059 - Command and Scripting InterpreterWindowsMacOSFortinet2ShellFortiJump