4.9
Medium
CVE-2025-54660 An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0…
Description
An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all versions may allow a local attacker to run the application step by step and retrieve the saved VPN user password
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiClientWindows 7.4 | 7.4.0 → 7.4.3 | No fix stated |
| FortiClientWindows 7.2 | 7.2.0 → 7.2.10 | No fix stated |
| FortiClientWindows 7.0 | 7.0.0 → 7.0.14 | No fix stated |
References
- fortiguard.fortinet.com fortiguard.fortinet.com
Timeline
- Published
- Last modified
Other CVEs of FortiClientWindows
The 30 CVEs of FortiClientWindows →
CVE-2026-84386
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all…
4.7
Medium
CVE-2026-70465
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows…
7.3
High
CVE-2026-44278
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2,…
2.1
Low
CVE-2025-62676
An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet…
6.4
Medium