Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Fortinet | FortiClientEMS | unaffected |
|
No data.
No data.
| Vendor | Product | Confidence | Versions | ||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Fortinet | Forticlientems | 90% |
|
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
Vendor Solution
Upgrade to FortiClientEMS version 8.0.0 or above Upgrade to FortiClientEMS version 7.4.8 or above
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-26-192 |
|
Thu, 12 Nov 2026 13:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Privilege Escalation via Local CLI Commands in FortiClientEMS |
Wed, 11 Nov 2026 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.7, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow an authenticated local attacker with admin privileges to gain root shell access via CLI commands. | |
| First Time appeared |
Fortinet
Fortinet forticlientems |
|
| Weaknesses | CWE-250 | |
| CPEs | cpe:2.3:a:fortinet:forticlientems:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.2.10:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.2.12:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.2.13:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.2.14:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.2.15:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.2.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.2.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.2.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.2.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.2.5:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.2.6:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.2.7:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.2.8:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.2.9:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.4.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.4.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.4.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.4.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.4.5:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.4.6:*:*:*:*:*:*:* cpe:2.3:a:fortinet:forticlientems:7.4.7:*:*:*:*:*:*:* |
|
| Vendors & Products |
Fortinet
Fortinet forticlientems |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: fortinet
Published:
Updated: 2026-11-12T15:27:20.307Z
Reserved: 2026-11-03T14:32:07.977Z
Link: CVE-2026-121527
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-11-11T22:17:11.113
Modified: 2026-11-12T16:18:50.813
Link: CVE-2026-121527
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-11-12T15:45:04Z
-
CWE-250
Execution with Unnecessary Privileges