FortiClient Hard-coded Crypto Key (7.4.0-7.4.2, 7.2) Info Disclosure
CVE-2026-44278 Published on May 12, 2026
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to information disclosure via <insert attack vector here>
Vulnerability Analysis
CVE-2026-44278 is exploitable with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.
Weakness Type
Use of Hard-coded Cryptographic Key
The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.
Products Associated with CVE-2026-44278
Want to know whenever a new CVE is published for Fortinet Forticlientwindows? stack.watch will email you.
Affected Versions
Fortinet FortiClientWindows:- Version 7.4.0, <= 7.4.2 is affected.
- Version 7.2.0, <= 7.2.14 is affected.