CVE-2020-9287: Fortinet FortiClient Emergency Management Server

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

An Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow a local attacker with control over the directory in which FortiClientEMSOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.

Affected products

• Fortinet FortiClient Emergency Management Server: up to and including 6.2.1

Published 2020-03-15. Last modified 2026-06-17.