Unnecessary Privilege Escalation in Fortinet FortiClientEMS
CVE-2026-121527

6.3MEDIUM

Key Information:

Vendor

Fortinet
Status
Forticlientems
Vendor
CVE Published:
11 November 2026

What is CVE-2026-121527?

A vulnerability exists in Fortinet FortiClientEMS that allows an authenticated local attacker with administrative privileges to execute commands with elevated rights, potentially granting them root shell access through the command-line interface (CLI). This flaw affects multiple versions of FortiClientEMS, which may pose significant risks if exploited, enabling unauthorized actions that could compromise system integrity.

Affected Version(s)

FortiClientEMS 7.4.3 <= 7.4.7

FortiClientEMS 7.4.0 <= 7.4.1

FortiClientEMS 7.2.12 <= 7.2.15

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-192

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.