EUVD-2026-72921
GHSA-5g7q-39wf-m9fj
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Local-only attack requiring admin privileges to exploit ownership gap; no confidentiality breach; availability disruption is the dominant impact.
Primary rating from Vendor (fortinet).
CVSS VectorVendor: fortinet
Lifecycle Timeline
4DescriptionCVE.org
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via <insert attack vector here>
AnalysisAI
Unverified ownership checks in Fortinet FortiClientWindows allow a locally authenticated administrator to perform improper access control operations, resulting in high availability impact and minor integrity modification of the endpoint security client. Affected versions are FortiClientWindows 7.4.0 through 7.4.7 and 7.2.0 through 7.2.15 on Windows endpoints. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an attacker with local, high-privilege (administrator-level) access to the Windows endpoint running FortiClientWindows (AV:L/PR:H per CVSS). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 5.1 Medium score is appropriate here: AV:L restricts exploitation to the local machine, and PR:H demands that the attacker already hold administrative or equivalent privileges on the Windows host - an already elevated position in the attack chain. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Consult the Fortinet PSIRT advisory FG-IR-26-165 at https://fortiguard.fortinet.com/psirt/FG-IR-26-165 for official fix versions; no exact patched release number is independently confirmed in the available intelligence beyond the advisory reference, so the patch status is 'Patch available per vendor advisory.' Organizations running FortiClientWindows 7.4.x should upgrade to a version above 7.4.7 once available, and those on 7.2.x should upgrade to a version above 7.2.15. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-283 – Unverified Ownership
View allShare
External POC / Exploit Code
Leaving vuln.today