CVE-2018-9191: Fortinet FortiClient

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attackers to execute unauthorized code or commands via the named pipe responsible for Forticlient updates.

Affected products

• Fortinet FortiClient: up to and including 6.0.4

Published 2019-05-30. Last modified 2026-06-17.