CVE-2018-9191

7.8 highEPSS 0.3%

High (7.8) in fortinet forticlient. EPSS 0.3% chance of exploitation in the next 30 days.

A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attackers to execute unauthorized code or commands via the named pipe responsible for Forticlient updates.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
Published: 2019-05-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:forticlient

References

https://fortiguard.com/advisory/FG-IR-18-108
https://fortiguard.com/advisory/FG-IR-18-108

Check your stack JSON