Fortinet patches FortiClient flaw that runs code from malicious sites
CVE-2026-121529 affects FortiClient 7.2 and 7.4 branches; Fortinet says exploitation is not known.
71
Organization
Baldur Security
- Mentions · 7d3
- Mentions · 30d3
- All mentions3
- First seenNov 11, 2026
- Last mentioned7h ago
Timeline
3 articles · newest firstFortinet patches nearly 100 vulnerabilities across its products
About 17 fixes are critical, including code execution and authentication bypass, with no exploitation stated.
66
FortiClient CORS flaw allows website-triggered RCE (CVE-2026-121529)
Fortinet says the CVSS 9.1 bug is not known exploited; fixes are 7.4.8 and 7.2.15, with no virtual patch.
74
Related CVEs
by mentions- Origin validation error in Fortinet FortiClient (user interaction)
Appears with
- Fortinetvendor · 3
- FortiClientproduct · 2
- FortiPAMproduct · 2
- FortiClient Windowsproduct · 1
- FortiClient Macproduct · 1
- FortiClient Windows PAMproduct · 1
- FortiAuthenticatorproduct · 1
- FortiManagerproduct · 1
- FortiOSproduct · 1
- FortiAnalyzerproduct · 1
- FortiMailproduct · 1
- FortiSASEproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.