CVE-2021-32592: Fortinet FortiClient

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search path.

Affected products

• Fortinet FortiClient: from 6.0.0, up to and including 6.0.9; from 6.2.0, up to and including 6.2.9; from 6.4.0, before 6.4.7 (fixed in 6.4.7); version 7.0.0 only
• Fortinet FortiClient Enterprise Management Server: from 6.0.0, up to and including 6.0.6; from 6.2.0, up to and including 6.2.9; from 6.4.0, before 6.4.7 (fixed in 6.4.7); version 7.0.0 only

Published 2021-12-01. Last modified 2026-06-17.