CVE-2026-121529: Critical severity Fortinet FortiClientMac vulnerability

Q: Which deployments are affected?

Affected releases are FortiClientMac 7.4.0 through 7.4.7; FortiClientWindows 7.4.0 through 7.4.7; FortiClientWindows 7.2.0 through 7.2.14; and FortiClientWindowsPAM 7.4.7 and 7.2.14.

Q: What does an attacker need to exploit this issue?

The attacker can be remote and does not need prior privileges, but successful exploitation requires interaction from the victim.

Q: What is the likely impact of successful exploitation?

A successful attacker may execute unauthorized code or commands. The stated impact includes high confidentiality, integrity, and availability effects.

Published Nov 10, 2026

Updated

A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2.0 through 7.2.14, FortiClientWindowsPAM 7.4.7, FortiClientWindowsPAM 7.2.14 may allow an unauthorized remote attacker to execute unauthorized code or commands. Successful exploitation requires interaction with the victim.

Affected Software

3 affected components

Fortinet FortiClientMac>=7.4.0<=7.4.7

Fortinet FortiClientWindows>=7.4.0<=7.4.7, >=7.2.0<=7.2.14

Fortinet FortiClientWindowsPAM=7.4.7, =7.2.14

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Fortinet FortiClientMac to a version that resolves this vulnerability.
Fixed in 7.4.8
Upgrade
Upgrade Fortinet FortiClientMac to a version that resolves this vulnerability.
Fixed in 8.0.0
Upgrade
Upgrade Fortinet FortiClientWindows to a version that resolves this vulnerability.
Fixed in 7.2.15
Upgrade
Upgrade Fortinet FortiClientWindows to a version that resolves this vulnerability.
Fixed in 7.4.8
Upgrade
Upgrade Fortinet FortiClientWindows to a version that resolves this vulnerability.
Fixed in 8.0.0
Upgrade
Upgrade Fortinet FortiClientWindowsPAM to a version that resolves this vulnerability.
Fixed in 7.2.15
Upgrade
Upgrade Fortinet FortiClientWindowsPAM to a version that resolves this vulnerability.
Fixed in 7.4.8
Upgrade
Upgrade Fortinet FortiClientWindowsPAM to a version that resolves this vulnerability.
Fixed in 8.0.0

Event History

Nov 10, 2026

CVE Published

via MITRE·08:10 PM

Data Sourced

via MITRE·08:10 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

Affected releases are FortiClientMac 7.4.0 through 7.4.7; FortiClientWindows 7.4.0 through 7.4.7; FortiClientWindows 7.2.0 through 7.2.14; and FortiClientWindowsPAM 7.4.7 and 7.2.14.

What does an attacker need to exploit this issue?

The attacker can be remote and does not need prior privileges, but successful exploitation requires interaction from the victim.

What is the likely impact of successful exploitation?

A successful attacker may execute unauthorized code or commands. The stated impact includes high confidentiality, integrity, and availability effects.

CVE-2026-121529: Critical severity Fortinet FortiClientMac vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments are affected?

What does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?