{"id":"CVE-2026-121527","aliases":[],"cve":{"records":[{"id":"CVE-2026-121527","source":"fortinet","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-11-03T14:32:07.977Z","published":"2026-11-11T21:31:52.231Z","modified":"2026-11-13T04:58:45.864Z"}],"publishers":[{"name":"fortinet","role":"CNA","organizationId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","modified":"2026-11-11T21:31:52.231Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-13T04:58:45.864Z"}],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-26-192","tags":[],"source":"fortinet"}],"weaknesses":[{"id":"CWE-250","description":"Escalation of privilege","source":"fortinet"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-12T00:00:00+00:00","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.7, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2…","titleSource":"fortinet","descriptionSource":"fortinet","description":"A execution with unnecessary privileges vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.7, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow an authenticated local attacker with admin privileges to gain root shell access via CLI commands.","score":6.3,"severity":"medium","published":"2026-11-11T21:31:52.231Z","modified":"2026-11-13T04:58:45.864Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Fortinet","name":"FortiClientEMS","platforms":[],"versions":[{"version":"7.4.3","status":"affected","lessThanOrEqual":"7.4.7","versionType":"semver"},{"version":"7.4.0","status":"affected","lessThanOrEqual":"7.4.1","versionType":"semver"},{"version":"7.2.12","status":"affected","lessThanOrEqual":"7.2.15","versionType":"semver"},{"version":"7.2.0","status":"affected","lessThanOrEqual":"7.2.10","versionType":"semver"}],"defaultStatus":"unaffected","cpes":["cpe:2.3:a:fortinet:forticlientems:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.14:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.13:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.12:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.15:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:forticlientems:7.2.0:*:*:*:*:*:*:*"],"source":"fortinet","url":"https://www.cve.org/CVERecord?id=CVE-2026-121527"}],"remediation":[{"text":"Upgrade to FortiClientEMS version 8.0.0 or above\nUpgrade to FortiClientEMS version 7.4.8 or above","source":"fortinet","url":"https://www.cve.org/CVERecord?id=CVE-2026-121527"}],"references":["https://fortiguard.fortinet.com/psirt/FG-IR-26-192"],"sources":[{"name":"CVE","id":"CVE-2026-121527","modified":"2026-11-13T04:58:45.864Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-121527"}],"assessments":[{"source":"fortinet","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","score":6.3}],"sourceAffected":[],"observedAt":"2026-11-13T05:18:25.287Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T04:00:32.782Z"},"coverage":[{"source":"NVD","status":"no-result","checkedAt":"2026-11-11T22:15:38.308Z","attemptedAt":"2026-11-11T22:15:38.308Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-11T22:15:38.229Z","attemptedAt":"2026-11-11T22:15:38.229Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-11T22:15:38.281Z","attemptedAt":"2026-11-11T22:15:38.281Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-11T22:15:37.754Z","attemptedAt":"2026-11-11T22:15:37.754Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-123902","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-123902","modified":"Nov 11, 2026, 9:31:52 PM","score":6.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","checkedAt":"2026-11-11T22:15:38.281Z"}],"aiSummary":{"text":"A vulnerability in Fortinet FortiClientEMS versions 7.4.3-7.4.7, 7.4.0-7.4.1, and 7.2 may allow an authenticated local attacker with admin privileges to gain root shell access. The weakness is an escalation of privilege.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-11T21:56:21.583Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-121527"}]}}