CVE-2026-121527
Fortinet FortiClientEMS Privilege Escalation Vulnerability
Description
A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.7, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow an authenticated local attacker with admin privileges to gain root shell access via CLI commands.
INFO
Published Date :
Nov. 11, 2026, 9:31 p.m.
Last Modified :
Nov. 11, 2026, 9:31 p.m.
Remotely Exploit :
No
Source :
fortinet
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | MEDIUM | 6abe59d8-c742-4dff-8ce8-9b0ca1073da8 |
Solution
- Remove unnecessary privileges.
- Restrict access to CLI commands.
- Update to a patched version.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-121527 vulnerability anywhere in the article.