CVE-2026-121527

medium

Description

A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.7, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow an authenticated local attacker with admin privileges to gain root shell access via CLI commands.

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-192

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-123902

Details

Source: Mitre, NVD

Published: 2026-11-11

Updated: 2026-11-13

Risk Information

CVSS v2

Base Score: 6.5

Vector: CVSS2#AV:L/AC:L/Au:M/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 6.7

Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Severity: Medium

EPSS

EPSS: 0.00163