CVE-2024-36507

7.8 highEPSS 0.3%

High (7.8) in fortinet forticlient. EPSS 0.3% chance of exploitation in the next 30 days.

A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-426
Published: 2024-11-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:forticlient

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-205

Check your stack JSON