Known vulnerabilities in FortiClient (Linux)

Software CPE: cpe:2.3:a:fortinet:forticlient_linux:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiClient (Linux) FortiClient (Linux) is affected by 10 known vulnerabilities: 1 critical, 1 high, 3 medium, 5 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123719 - Improper Link Resolution Before File Access ('Link Following')
CVE-2026-24018
CWE-59 Low
No
No
7.2.13, 7.4.5 10.03.2026 SB2026031081
#VU101831 - Cleartext Storage of Sensitive Information
CVE-2024-50570
CWE-312 Low
No
No
7.0.14, 7.2.8, 7.4.3 18.12.2024 SB2024121833
#VU97117 - Improper Certificate Validation
CVE-2024-31489
CWE-295 Medium
No
No
7.0.12, 7.2.1 10.09.2024 SB20240910155
#VU97116 - Improper Certificate Validation
CVE-2022-45856
CWE-295 Medium
No
No
7.2.5 10.09.2024 SB20240910154
#VU91755 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2024-3661
CWE-300 Medium
No
No
- 11.06.2024 SB20240611271
SB2025011365
SB2025011657
and 7 more
#VU88256 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-45590
CWE-94 High
No
No
7.0.11, 7.2.1 09.04.2024 SB2024040961
#VU81942 - Exposure of sensitive information to an unauthorized actor
CVE-2023-37939
CWE-200 Low
No
No
7.2.1 12.10.2023 SB2023101237
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863
CWE-122 Critical
Available
Exploited
7.2.5 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU61980 - Incorrect Permission Assignment for Critical Resource
CVE-2021-44167
CWE-732 Low
No
No
6.4.8, 7.0.3 07.04.2022 SB2022040712
#VU61979 - Exposure of sensitive information to an unauthorized actor
CVE-2021-43205
CWE-200 Low
No
No
6.4.8, 7.0.3 07.04.2022 SB2022040712