Fortinet Inc. FortiClient Windows

Name: Fortinet Inc. FortiClient Windows
Brand: Fortinet Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical14high6medium2low

updated 2026-10-27

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-40586US	—	0.25% (16th)	Exploit	no fix	2025-02-11	3 versions
CVE-2025-62676US	—	0.24% (15th)	Exploit	no fix	2026-02-10	3 versions
CVE-2018-9195US	medium5.9OT elevated	1.58% (75th)	—	no fix	2019-11-21	≤ 6.2.0
CVE-2019-16150US	medium5.5OT elevated	1.16% (67th)	—	no fix	2020-06-04	≤ 6.4.0
CVE-2020-9290US	high7.8	0.86% (58th)	—	no fix	2020-03-15	≤ 6.2.3
CVE-2022-43946US	high8.1	0.70% (53rd)	—	no fix	2023-04-11	6 versions
CVE-2025-24473US	low3.7	0.57% (47th)	—	no fix	2025-05-28	7.2.0 → 7.2.1
CVE-2019-6692US	high7.8	0.56% (46th)	—	no fix	2019-10-24	≤ 6.2.2
CVE-2020-9291US	high7.8	0.53% (45th)	—	no fix	2020-06-01	≤ 6.2.2
CVE-2026-70465US	—	0.52% (44th)	—	no fix	2026-08-12	2 versions
CVE-2021-41031US	high7.8	0.47% (41st)	—	no fix	2022-07-18	3 versions
CVE-2018-9190US	medium5.5	0.43% (37th)	—	no fix	2019-02-08	≤ 6.0.3
CVE-2021-44169US	high8.8	0.38% (32nd)	—	no fix	2022-04-06	4 versions
CVE-2022-42470US	high7.8	0.35% (28th)	—	no fix	2023-04-11	4 versions
CVE-2022-26113US	high7.1	0.33% (26th)	—	no fix	2022-07-19	4 versions
CVE-2023-41840US	high7.8	0.31% (24th)	—	no fix	2023-11-14	2 versions
CVE-2024-36507US	high7.8	0.28% (20th)	—	no fix	2024-11-12	3 versions
CVE-2021-41028US	high7.5OT elevated	0.23% (14th)	—	no fix	2021-12-16	2 versions
CVE-2021-43066US	high7.8	0.22% (13th)	—	no fix	2022-05-11	4 versions
CVE-2024-36513US	high8.8	0.22% (13th)	—	no fix	2024-11-12	3 versions
CVE-2022-33877US	medium5.5OT elevated	0.22% (12th)	—	no fix	2023-06-13	2 versions
CVE-2024-50564US	low3.3OT elevated	0.22% (13th)	—	no fix	2025-01-14	4 versions
CVE-2023-33304US	medium5.5OT elevated	0.21% (10th)	—	no fix	2023-11-14	2 versions
CVE-2025-57716US	high7.3	0.18% (7th)	—	no fix	2025-10-14	3 versions
CVE-2025-47761US	—	0.17% (6th)	—	no fix	2025-11-18	2 versions
CVE-2024-54019US	medium6.5	0.17% (6th)	—	no fix	2025-06-10	3 versions
CVE-2025-54660US	—OT elevated	0.17% (6th)	—	no fix	2025-11-18	3 versions
CVE-2025-46373US	—	0.16% (6th)	—	no fix	2025-11-18	2 versions
CVE-2024-50570US	—OT elevated	0.14% (3rd)	—	no fix	2024-12-18	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-798Use of Hard-coded Credentials5 CVEs
CWE-426Untrusted Search Path4 CVEs
CWE-321Use of Hard-coded Cryptographic Key3 CVEs
CWE-427Uncontrolled Search Path Element3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-23Relative Path Traversal2 CVEs
CWE-668Exposure of Resource to Wrong Sphere2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan