CVE-2026-24018: High severity Fortinet FortiClientLinux vulnerability

Published Mar 10, 2026
·
Updated

A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 may allow a local and unprivileged user to escalate their privileges to root.

Affected Software

4 affected components
Fortinet FortiClientLinux>=7.4.0<=7.4.4
Fortinet FortiClientLinux>=7.2.2<=7.2.12
Fortinet FortiClient Linux>=7.2.2<7.2.13
Fortinet FortiClient Linux>=7.4.0<7.4.5

Remediation

Information

Upgrade to upcoming FortiClientLinux version 8.0.0 or above Upgrade to FortiClientLinux version 7.4.5 or above Upgrade to FortiClientLinux version 7.2.13 or above

Event History

Mar 10, 2026
CVE Published
via MITRE·04:44 PM
Data Sourced
via MITRE·04:44 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·06:18 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-24018?

CVE-2026-24018 is considered a high-severity vulnerability due to its potential for privilege escalation.

2

How do I fix CVE-2026-24018?

To fix CVE-2026-24018, you should upgrade Fortinet FortiClientLinux to version 7.4.5 or later for 7.4.x and 7.2.13 or later for 7.2.x.

3

Who is affected by CVE-2026-24018?

CVE-2026-24018 affects users of Fortinet FortiClientLinux versions 7.4.0 to 7.4.4 and 7.2.2 to 7.2.12.

4

Can CVE-2026-24018 be exploited remotely?

No, CVE-2026-24018 requires local access to exploit, as it involves symbolic link following.

5

What is the impact of CVE-2026-24018?

The impact of CVE-2026-24018 allows local unprivileged users to escalate their privileges to root on affected systems.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203