CVE-2020-9292: Fortinet Fortisiem Windows Agent

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

An unquoted service path vulnerability in the FortiSIEM Windows Agent component may allow an attacker to gain elevated privileges via the AoWinAgt executable service path.

Affected products

• Fortinet Fortisiem Windows Agent: up to and including 3.1.2

Published 2020-06-04. Last modified 2026-06-17.