CVE-2025-54660

—

CVSS 3.1

5.5 medium

EPSS

<1%p5

Published

Nov 18, 2025 (Nov 18, 2025)

Modified

Jun 17, 2026

Description

An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all versions may allow a local attacker to run the application step by step and retrieve the saved VPN user password

Vendors: fortinet
Products: forticlient
Weakness: CWE-489
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.