FortiClient Windows 7.4.0-7.4.7 Unverified Ownership Vulnerability (CVE-2026-84386)
CVE-2026-84386 Published on September 8, 2026

A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port.

NVD

Vulnerability Analysis

CVE-2026-84386 is exploitable with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, with no impact on integrity, and a high impact on availability.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
HIGH
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
LOW
Availability Impact:
HIGH

Weakness Type

Unverified Ownership

The software does not properly verify that a critical resource is owned by the proper entity.


Products Associated with CVE-2026-84386

Want to know whenever a new CVE is published for Fortinet Forticlientwindows? stack.watch will email you.

 

Affected Versions

Fortinet FortiClientWindows: