CVE-2021-32592

7.8 highEPSS 0.3%

High (7.8) in fortinet. EPSS 0.3% chance of exploitation in the next 30 days.

An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search path.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-427
Published: 2021-12-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:forticlient
fortinet:forticlient_enterprise_management_server

References

https://fortiguard.com/advisory/FG-IR-21-088
https://fortiguard.com/advisory/FG-IR-21-088

Check your stack JSON