CVE-2021-22127

8.0 highEPSS 0.5%

High (8.0) in fortinet forticlient. EPSS 0.5% chance of exploitation in the next 30 days.

An improper input validation vulnerability in FortiClient for Linux 6.4.x before 6.4.3, FortiClient for Linux 6.2.x before 6.2.9 may allow an unauthenticated attacker to execute arbitrary code on the host operating system as root via tricking the user into connecting to a network with a malicious name.

Severity

CVSS 3.1

8.0 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2022-04-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:forticlient

References

https://fortiguard.com/advisory/FG-IR-20-241
https://fortiguard.com/advisory/FG-IR-20-241

Check your stack JSON