ZDI-26-115 HIGH 7.8 Published Feb 19, 2026

Fortinet FortiClient VPN FCConfig Utility Link Following Local Privilege Escalation Vulnerability

Fortinet

Fortinet FortiClient VPN contains a local privilege escalation vulnerability (CVE-2025-62676) that allows attackers with low-level code execution to gain elevated system privileges. This is a high-severity issue rated 7.8 CVSS that requires initial local access but could enable complete system compromise once exploited. Security teams should prioritize patching FortiClient VPN installations and implementing access controls to limit execution of untrusted code on endpoints running this software.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy