Fortinet FortiClientWindows

Name: Fortinet FortiClientWindows
Brand: Fortinet

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical13high8medium4low

updated 2026-10-27

vulnerabilities (49)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-50562US	—	1.16% (67th)	Exploit	no fix	2025-06-10	3 versions
CVE-2024-40586US	—	0.25% (16th)	Exploit	no fix	2025-02-11	3 versions
CVE-2025-62676US	—	0.24% (15th)	Exploit	no fix	2026-02-10	4 versions
CVE-2025-52436US	critical9.6	7.31% (94th)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2026-84387US	—	1.40% (72nd)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-84392US	—	1.07% (65th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2025-22254US	high7.2	0.85% (58th)	—	no fix	2025-06-10	3 versions
CVE-2022-43946US	high8.1	0.70% (53rd)	—	no fix	2023-04-11	4 versions
CVE-2025-24473US	low3.7	0.57% (47th)	—	no fix	2025-05-28	2 versions
CVE-2025-25250US	medium4.3	0.55% (46th)	—	no fix	2025-06-10	3 versions
CVE-2026-84390US	—	0.52% (44th)	—	no fix	2026-09-11	≤ vers:unknown/*
CVE-2026-70465US	—	0.52% (44th)	—	no fix	2026-08-12	2 versions
CVE-2024-47574US	high7.8OT elevated	0.46% (40th)	—	no fix	2024-11-13	4 versions
CVE-2024-50568US	—	0.45% (39th)	—	no fix	2025-06-10	3 versions
CVE-2026-84391US	—	0.41% (35th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2025-22251US	medium5.3	0.40% (34th)	—	no fix	2025-06-10	3 versions
CVE-2026-26084US	—	0.39% (33rd)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2018-9193US	high7.8	0.38% (32nd)	—	no fix	2019-05-30	2 versions
CVE-2026-21743US	—OT elevated	0.38% (32nd)	—	no fix	2026-02-10	≤ vers:unknown/*
CVE-2025-24471US	—	0.38% (31st)	—	no fix	2025-06-10	3 versions
CVE-2024-31489US	high8.1	0.36% (30th)	—	no fix	2024-09-10	2 versions
CVE-2022-42470US	high7.8	0.35% (28th)	—	no fix	2023-04-11	4 versions
CVE-2023-48786US	—	0.34% (27th)	—	no fix	2025-06-10	3 versions
CVE-2024-32119US	—	0.33% (25th)	—	no fix	2025-06-10	3 versions
CVE-2020-9295US	high7.5	0.32% (25th)	—	no fix	2025-03-17	2 versions
CVE-2023-41840US	high7.8	0.31% (24th)	—	no fix	2023-11-14	2 versions
CVE-2024-36507US	high7.8	0.28% (20th)	—	no fix	2024-11-12	3 versions
CVE-2026-84393US	—	0.28% (20th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2023-37939US	low3.3	0.27% (19th)	—	no fix	2023-10-10	4 versions
CVE-2025-22862US	medium6.7OT elevated	0.25% (17th)	—	no fix	2025-10-02	3 versions
CVE-2026-22575US	—	0.24% (16th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2022-45856US	medium5.9	0.23% (14th)	—	no fix	2024-09-10	2 versions
CVE-2026-84385US	—	0.23% (14th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2024-36513US	high8.8	0.22% (13th)	—	no fix	2024-11-12	3 versions
CVE-2022-33877US	medium5.5OT elevated	0.22% (12th)	—	no fix	2023-06-13	2 versions
CVE-2024-50564US	low3.3OT elevated	0.22% (13th)	—	no fix	2025-01-14	4 versions
CVE-2026-84389US	—	0.22% (12th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2023-29184US	low2.3	0.21% (11th)	—	no fix	2025-06-10	3 versions
CVE-2022-40681US	high7.1OT elevated	0.21% (11th)	—	no fix	2023-11-14	4 versions
CVE-2023-33304US	medium5.5OT elevated	0.21% (10th)	—	no fix	2023-11-14	2 versions
CVE-2025-57716US	high7.3	0.18% (7th)	—	no fix	2025-10-14	3 versions
CVE-2025-47761US	—	0.17% (6th)	—	no fix	2025-11-18	2 versions
CVE-2022-40682US	high7.8OT elevated	0.17% (6th)	—	no fix	2023-04-11	4 versions
CVE-2024-54019US	medium6.5	0.17% (6th)	—	no fix	2025-06-10	6 versions
CVE-2025-54660US	—OT elevated	0.17% (6th)	—	no fix	2025-11-18	3 versions
CVE-2025-46373US	—	0.16% (6th)	—	no fix	2025-11-18	2 versions
CVE-2026-84386US	—	0.14% (4th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2024-50570US	—OT elevated	0.14% (3rd)	—	no fix	2024-12-18	3 versions
CVE-2026-44278US	medium5.5OT elevated	0.10% (1st)	—	no fix	2026-05-12	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-295Improper Certificate Validation3 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-288Authentication Bypass Using an Alternate Path or Channel2 CVEs
CWE-297Improper Validation of Certificate with Host Mismatch2 CVEs
CWE-321Use of Hard-coded Cryptographic Key2 CVEs
CWE-426Untrusted Search Path2 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)27 CVEs
NLNCSC-NL (CSAF)24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan