CVE-2026-84386
MediumCVSS 5.1Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7 and 7.2 all versions may allow attacker to improper access control via an exposed minifilter communication port.
Risk Assessment
An attacker may gain unauthorized access to the system or data, potentially leading to security breaches.
Recommendation
Update FortiClientWindows to the latest available version that includes the fix and restrict access to the minifilter communication port.
Other vulnerabilities in FortiClientWindows
See all- CVE-2026-44278Low
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2 and FortiClientWindows 7.2 all versions may allow an attacker to disclose information.
- CVE-2025-54660Medium
FortiClientWindows versions 7.4.0 through 7.4.3, 7.2.0 through 7.2.10, and all versions of 7.0 contain active debug code that may allow a local attacker to run the application step by step and retrieve the saved VPN user password.
- CVE-2025-47761High
An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] in Fortinet FortiClientWindows 7.4.0 through 7.4.3 and 7.2.0 through 7.2.9 may allow an authenticated local user to execute unauthorized code via the fortips driver. A successful attack requires bypassing Windows memory protections such as Heap integrity and HSP, and an active VPN IPSec connection.
- CVE-2025-46373High
A Heap-based Buffer Overflow vulnerability [CWE-122] in Fortinet FortiClientWindows 7.4.0 through 7.4.3 and 7.2.0 through 7.2.8 may allow an authenticated local IPSec user to execute arbitrary code or commands via "fortips_74.sys". The attacker would need to bypass the Windows heap integrity protections.
Original NVD description (English source)
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS